Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    239s
  • max time network
    377s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241211-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    21/12/2024, 14:48 UTC

General

  • Target

    b.zip

  • Size

    446KB

  • MD5

    9cefa111452fd3674d0d7e3e24ea076b

  • SHA1

    c185f75dd1285e35ff59b2003ef855382d6a850f

  • SHA256

    1806b7cc24522509cab563bea8d1dc6c9c992c9d5c575836de3f363a7b10a8cc

  • SHA512

    b01413da6c974821b1365a264650f5daf6a6bddbf311df33c20b60fb654e6a33a070587edaa3e3f89d63ffaa14aa4ddb4b6c05ff8d2966df6561f7e4fef685ea

  • SSDEEP

    12288:soutuJQIn872o78fwwHqo5C8nDDCLu/ou7I0ngv0q:shsJQo87QfUo5CkDOLr8bBq

Malware Config

Extracted

Path

C:\Program Files (x86)\instructions_read_me.txt

Family

blackbasta

Ransom Note
ATTENTION! Your network has been breached and all data was encrypted. Please contact us at: https://bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion/ Login ID: 3dd718a3-db04-485f-b882-250349c8a4de *!* To access .onion websites download and install Tor Browser at: https://www.torproject.org/ (Tor Browser is not related to us) *!* To restore all your PCs and get your network working again, follow these instructions: - Any attempts to modify, decrypt or rename the files will lead to its fatal corruption. It doesn't matter, who are trying to do this, either it will be your IT guys or a recovery agency. Please follow these simple rules to avoid data corruption: - Do not modify, rename or delete files. Any attempts to modify, decrypt or rename the files will lead to its fatal corruption. - Do not hire a recovery company. They can't decrypt without the key. They also don't care about your business. They believe that they are good negotiators, but it is not. They usually fail. So speak for yourself. Waiting you in a chat.
URLs

https://bastad5huzwkepdixedg2gekg7jk22ato24zyllp6lnjx7wdtyctgvyd.onion/

Signatures

  • Black Basta

    A ransomware family targeting Windows and Linux ESXi first seen in February 2022.

  • Blackbasta family
  • Renames multiple (210) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • A potential corporate email address has been identified in the URL: burn@2x.be0bd36d.png
  • A potential corporate email address has been identified in the URL: dark-mode@2x.3e150d01.png
  • A potential corporate email address has been identified in the URL: data-for-sale@2x.png
  • A potential corporate email address has been identified in the URL: flame@2x.40e1cfa0.png
  • A potential corporate email address has been identified in the URL: night@2x.4ca79636.png
  • A potential corporate email address has been identified in the URL: widget-big@2x.a260ccf6.png
  • A potential corporate email address has been identified in the URL: widget-small@2x.07c865df.png
  • Loads dropped DLL 5 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Checks processor information in registry 2 TTPs 8 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 5 IoCs
  • Opens file in notepad (likely ransom note) 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs
  • Suspicious use of FindShellTrayWindow 23 IoCs
  • Suspicious use of SendNotifyMessage 20 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\b.zip"
    1⤵
    • Modifies registry class
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:4260
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:2808
    • C:\Windows\System32\cmd.exe
      "C:\Windows\System32\cmd.exe"
      1⤵
      • Suspicious use of WriteProcessMemory
      PID:1996
      • C:\Windows\system32\rundll32.exe
        rundll32 basta.dll,31
        2⤵
        • Loads dropped DLL
        PID:4904
      • C:\Windows\system32\rundll32.exe
        rundll32 basta.dll,entry
        2⤵
        • Loads dropped DLL
        PID:4688
      • C:\Windows\system32\rundll32.exe
        rundll32 basta.dll,entry
        2⤵
        • Loads dropped DLL
        PID:1980
      • C:\Windows\system32\rundll32.exe
        rundll32 basta.dll,main
        2⤵
        • Loads dropped DLL
        PID:4368
      • C:\Windows\system32\rundll32.exe
        rundll32 basta.dll,#1
        2⤵
        • Loads dropped DLL
        • Drops file in Program Files directory
        • Modifies registry class
        PID:1052
      • C:\Windows\system32\rundll32.exe
        rundll32 basta.dll,#2
        2⤵
          PID:3196
        • C:\Windows\system32\rundll32.exe
          rundll32 basta.dll,#3
          2⤵
            PID:6128
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe"
          1⤵
          • Suspicious use of WriteProcessMemory
          PID:1596
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe"
            2⤵
            • Checks processor information in registry
            • Modifies registry class
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:4888
            • C:\Program Files\Mozilla Firefox\firefox.exe
              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2020 -parentBuildID 20240401114208 -prefsHandle 1940 -prefMapHandle 1948 -prefsLen 23839 -prefMapSize 244658 -appDir "C:\Program Files\Mozilla Firefox\browser" - {ad850851-9de6-4e26-bd25-af0ae2d6989b} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" gpu
              3⤵
                PID:1040
              • C:\Program Files\Mozilla Firefox\firefox.exe
                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2416 -parentBuildID 20240401114208 -prefsHandle 2404 -prefMapHandle 2400 -prefsLen 23717 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {8bf26cc4-8e18-44a5-82c8-a89813f36af8} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" socket
                3⤵
                  PID:1400
                • C:\Program Files\Mozilla Firefox\firefox.exe
                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3020 -childID 1 -isForBrowser -prefsHandle 2924 -prefMapHandle 3160 -prefsLen 22652 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {bbce8c75-085a-4587-a4f5-c79bb915fe40} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
                  3⤵
                    PID:4788
                  • C:\Program Files\Mozilla Firefox\firefox.exe
                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=3692 -childID 2 -isForBrowser -prefsHandle 3684 -prefMapHandle 3668 -prefsLen 29091 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {0661a20c-4041-4909-878e-c6f7346133a7} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
                    3⤵
                      PID:3220
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4476 -parentBuildID 20240401114208 -sandboxingKind 0 -prefsHandle 4512 -prefMapHandle 4508 -prefsLen 29091 -prefMapSize 244658 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {dde1eb10-e440-4ec9-95b2-45cc3df11de9} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" utility
                      3⤵
                      • Checks processor information in registry
                      PID:1144
                    • C:\Program Files\Mozilla Firefox\firefox.exe
                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5216 -childID 3 -isForBrowser -prefsHandle 5340 -prefMapHandle 3672 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {dc0aa74d-1c63-4488-86bc-993b0800f6dd} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
                      3⤵
                        PID:908
                      • C:\Program Files\Mozilla Firefox\firefox.exe
                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5476 -childID 4 -isForBrowser -prefsHandle 5484 -prefMapHandle 5496 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {f1b0b64d-9c03-4487-aa0b-f7ab849f7181} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
                        3⤵
                          PID:2172
                        • C:\Program Files\Mozilla Firefox\firefox.exe
                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5688 -childID 5 -isForBrowser -prefsHandle 5764 -prefMapHandle 5760 -prefsLen 27051 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1f435a70-2575-4520-9362-7dd31bacea8e} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
                          3⤵
                            PID:4284
                          • C:\Program Files\Mozilla Firefox\firefox.exe
                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5176 -childID 6 -isForBrowser -prefsHandle 6260 -prefMapHandle 6276 -prefsLen 27211 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {33d26fda-6274-4da9-aa11-95a3686d529d} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
                            3⤵
                              PID:3976
                            • C:\Program Files\Mozilla Firefox\firefox.exe
                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=5408 -childID 7 -isForBrowser -prefsHandle 6232 -prefMapHandle 4724 -prefsLen 27211 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {039d4bd8-b2e8-4326-9547-5f461b2450bd} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
                              3⤵
                                PID:4376
                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=6724 -childID 8 -isForBrowser -prefsHandle 3900 -prefMapHandle 6668 -prefsLen 27998 -prefMapSize 244658 -jsInitHandle 1124 -jsInitLen 234952 -parentBuildID 20240401114208 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {29eb74f7-0cdb-4353-80ed-9ed21effd388} 4888 "\\.\pipe\gecko-crash-server-pipe.4888" tab
                                3⤵
                                  PID:1840
                            • C:\Windows\system32\NOTEPAD.EXE
                              "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\instructions_read_me.txt
                              1⤵
                              • Opens file in notepad (likely ransom note)
                              PID:5132

                            Network

                            • flag-us
                              DNS
                              28.118.140.52.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              28.118.140.52.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              71.159.190.20.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              71.159.190.20.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              97.17.167.52.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              97.17.167.52.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              149.220.183.52.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              149.220.183.52.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              149.220.183.52.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              149.220.183.52.in-addr.arpa
                              IN PTR
                            • flag-us
                              DNS
                              checkappexec.microsoft.com
                              Remote address:
                              8.8.8.8:53
                              Request
                              checkappexec.microsoft.com
                              IN A
                              Response
                              checkappexec.microsoft.com
                              IN CNAME
                              prod-atm-wds-apprep.trafficmanager.net
                              prod-atm-wds-apprep.trafficmanager.net
                              IN CNAME
                              prod-agic-us-3.uksouth.cloudapp.azure.com
                              prod-agic-us-3.uksouth.cloudapp.azure.com
                              IN A
                              172.165.61.93
                            • flag-gb
                              POST
                              https://checkappexec.microsoft.com/windows/shell/actions
                              Remote address:
                              172.165.61.93:443
                              Request
                              POST /windows/shell/actions HTTP/2.0
                              host: checkappexec.microsoft.com
                              accept-encoding: gzip, deflate
                              user-agent: SmartScreen/2814751014982010
                              authorization: SmartScreenHash eyJhdXRoSWQiOiJhZGZmZjVhZC1lZjllLTQzYTYtYjFhMy0yYWQ0MjY3YWVlZDUiLCJoYXNoIjoiNXg5b1VuaHUrdXc9Iiwia2V5IjoiOXYzV0FKb3dUSjl5NjdoWmh1cVU2dz09In0=
                              content-length: 1182
                              content-type: application/json; charset=utf-8
                              cache-control: no-cache
                              Response
                              HTTP/2.0 200
                              date: Sat, 21 Dec 2024 14:49:28 GMT
                              content-type: application/json; charset=utf-8
                              content-length: 183
                              server: Kestrel
                              cache-control: max-age=0, private
                              request-context: appId=cid-v1:7f05e9f0-1fe6-401c-8ae7-2478e40e2f1e
                            • flag-us
                              DNS
                              93.61.165.172.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              93.61.165.172.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              212.20.149.52.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              212.20.149.52.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              15.164.165.52.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              15.164.165.52.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              83.210.23.2.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              83.210.23.2.in-addr.arpa
                              IN PTR
                              Response
                              83.210.23.2.in-addr.arpa
                              IN PTR
                              a2-23-210-83deploystaticakamaitechnologiescom
                            • flag-us
                              DNS
                              14.227.111.52.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              14.227.111.52.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              www.mozilla.org
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              www.mozilla.org
                              IN A
                              Response
                              www.mozilla.org
                              IN CNAME
                              www-mozilla.fastly-edge.com
                              www-mozilla.fastly-edge.com
                              IN A
                              151.101.3.19
                              www-mozilla.fastly-edge.com
                              IN A
                              151.101.67.19
                              www-mozilla.fastly-edge.com
                              IN A
                              151.101.131.19
                              www-mozilla.fastly-edge.com
                              IN A
                              151.101.195.19
                            • flag-us
                              GET
                              https://www.mozilla.org/firefox/welcome/21/
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /firefox/welcome/21/ HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              upgrade-insecure-requests: 1
                              sec-fetch-dest: document
                              sec-fetch-mode: navigate
                              sec-fetch-site: cross-site
                              te: trailers
                              Response
                              HTTP/2.0 302
                              server: granian
                              content-type: text/html; charset=utf-8
                              location: /en-US/firefox/welcome/21/
                              x-backend-server: bedrock-755f64b867-bjbrg.gcp-us-west1
                              strict-transport-security: max-age=31536000
                              x-content-type-options: nosniff
                              referrer-policy: strict-origin-when-cross-origin
                              cross-origin-opener-policy: same-origin
                              via: 1.1 google, 1.1 varnish
                              accept-ranges: bytes
                              age: 1268
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              x-served-by: cache-lon420121-LON
                              x-cache: HIT
                              x-cache-hits: 0
                              x-timer: S1734792739.454507,VS0,VE1
                              vary: Accept-Language
                              content-length: 0
                            • flag-us
                              GET
                              https://www.mozilla.org/en-US/firefox/welcome/21/
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /en-US/firefox/welcome/21/ HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              upgrade-insecure-requests: 1
                              sec-fetch-dest: document
                              sec-fetch-mode: navigate
                              sec-fetch-site: cross-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: granian
                              content-type: text/html; charset=utf-8
                              x-frame-options: DENY
                              content-security-policy: frame-src www.youtube.com *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com accounts.firefox.com js.stripe.com 'self' *.mozilla.org; default-src 'self' *.mozilla.com *.mozilla.net *.mozilla.org; font-src 'self' *.mozilla.com *.mozilla.net *.mozilla.org; img-src data: *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com images.ctfassets.net 'self' *.mozilla.org; script-src www.youtube.com 'unsafe-inline' *.mozilla.com www.googletagmanager.com s.ytimg.com *.mozilla.net www.google-analytics.com tagmanager.google.com 'unsafe-eval' js.stripe.com 'self' *.mozilla.org; connect-src https://accounts.firefox.com/ *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com o1069899.sentry.io region1.google-analytics.com stage.cjms.nonprod.cloudops.mozgcp.net o1069899.ingest.sentry.io cjms.services.mozilla.com 'self' sentry.prod.mozaws.net *.mozilla.org; child-src www.youtube.com *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com accounts.firefox.com js.stripe.com 'self' *.mozilla.org; style-src 'unsafe-inline' *.mozilla.com *.mozilla.net 'self' *.mozilla.org
                              content-security-policy-report-only: frame-src www.youtube.com *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com accounts.firefox.com js.stripe.com 'self' *.mozilla.org; default-src 'self'; font-src 'self' *.mozilla.com *.mozilla.net *.mozilla.org; base-uri 'none'; media-src 'self' assets.mozilla.net videos.cdn.mozilla.net; img-src data: *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com images.ctfassets.net 'self' *.mozilla.org; object-src 'none'; script-src www.youtube.com 'unsafe-inline' *.mozilla.com www.googletagmanager.com s.ytimg.com *.mozilla.net www.google-analytics.com tagmanager.google.com 'unsafe-eval' js.stripe.com 'self' *.mozilla.org; upgrade-insecure-requests; connect-src https://accounts.firefox.com/ *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com o1069899.sentry.io region1.google-analytics.com stage.cjms.nonprod.cloudops.mozgcp.net o1069899.ingest.sentry.io cjms.services.mozilla.com 'self' sentry.prod.mozaws.net *.mozilla.org; child-src www.youtube.com *.mozilla.com www.googletagmanager.com *.mozilla.net www.google-analytics.com accounts.firefox.com js.stripe.com 'self' *.mozilla.org; frame-ancestors 'none'; style-src *.mozilla.com *.mozilla.net 'self' *.mozilla.org
                              cache-control: max-age=600
                              expires: Thu, 19 Dec 2024 02:14:00 GMT
                              x-clacks-overhead: GNU Terry Pratchett
                              content-language: en-US
                              etag: "2a224df9a7bd952fdb0f670630b437aa"
                              x-backend-server: bedrock-755f64b867-wmzh2.gcp-us-west1
                              strict-transport-security: max-age=31536000
                              x-content-type-options: nosniff
                              referrer-policy: strict-origin-when-cross-origin
                              cross-origin-opener-policy: same-origin
                              via: 1.1 google, 1.1 varnish
                              content-encoding: br
                              accept-ranges: bytes
                              age: 0
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              x-served-by: cache-lon420121-LON
                              x-cache: HIT
                              x-cache-hits: 0
                              x-timer: S1734792739.494439,VS0,VE174
                              vary: Accept-Encoding
                              content-length: 6142
                            • flag-us
                              GET
                              https://www.mozilla.org/media/js/site.b49d941e3374.js
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/js/site.b49d941e3374.js HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              x-guploader-uploadid: AFiumC5qoyRV_xqs97BFXIYWjzHphlRpOG8ncCAfRstOOChYTxq7vPO_G6TVeSO_ReoypQZBzvXAPj4
                              x-goog-generation: 1733837360340772
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 5895
                              x-goog-meta-goog-reserved-file-mtime: 1733837258
                              x-goog-hash: crc32c=60FKGQ==
                              x-goog-hash: md5=tJ2UHjN0uFrhrv9GUPRd3Q==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              server: UploadServer
                              expires: Sat, 21 Dec 2024 13:56:53 GMT
                              last-modified: Tue, 17 Dec 2024 23:38:58 GMT
                              etag: "b49d941e3374b85ae1aeff4650f45ddd"
                              content-type: text/javascript
                              content-encoding: br
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 6926
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400094-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 16, 20
                              x-timer: S1734792740.862416,VS0,VE0
                              vary: Accept-Encoding
                              content-length: 2051
                            • flag-us
                              GET
                              https://www.mozilla.org/media/css/m24-root.77a146bcaf17.css
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/css/m24-root.77a146bcaf17.css HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/css,*/*;q=0.1
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: style
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              x-guploader-uploadid: AFiumC4hCyneTXxzsCvuRIDOspIO88n9Z7T88PZLvpBFXk2wwtuHZ4xRTEpLkkhaNri5F1GuZ-iehos
                              x-goog-generation: 1734478690567995
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 4280
                              x-goog-meta-goog-reserved-file-mtime: 1734478658
                              x-goog-hash: crc32c=Pvc2kw==
                              x-goog-hash: md5=d6FGvK8Xo2qZvNlpmVH0Tg==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              server: UploadServer
                              expires: Sat, 21 Dec 2024 13:44:38 GMT
                              last-modified: Tue, 17 Dec 2024 23:38:10 GMT
                              etag: "77a146bcaf17a36a99bcd9699951f44e"
                              content-type: text/css
                              content-encoding: br
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 7661
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300041-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 23, 10
                              x-timer: S1734792740.862848,VS0,VE0
                              vary: Accept-Encoding
                              content-length: 820
                            • flag-us
                              GET
                              https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/css/m24-navigation-and-footer.bbc50722799f.css HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/css,*/*;q=0.1
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: style
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              x-guploader-uploadid: AFiumC47kuB193_U7mhGzQ5-_crhGowAw9c9aVNCe8oixD4Ss945qGMXttde547mtY77Wjv_cYhusHI
                              x-goog-generation: 1734478690574500
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 35274
                              x-goog-meta-goog-reserved-file-mtime: 1734478658
                              x-goog-hash: crc32c=zM+XbQ==
                              x-goog-hash: md5=u8UHInmfUyVFL0oR/3eg0g==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              server: UploadServer
                              expires: Sat, 21 Dec 2024 14:10:07 GMT
                              last-modified: Tue, 17 Dec 2024 23:38:10 GMT
                              etag: "bbc50722799f5325452f4a11ff77a0d2"
                              content-type: text/css
                              content-encoding: br
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 6131
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300042-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 4, 21
                              x-timer: S1734792740.863692,VS0,VE0
                              vary: Accept-Encoding
                              content-length: 4851
                            • flag-us
                              GET
                              https://www.mozilla.org/media/css/protocol-firefox.8fb2966e28e1.css
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/css/protocol-firefox.8fb2966e28e1.css HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/css,*/*;q=0.1
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: style
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              x-guploader-uploadid: AFiumC5qRdSRInC3kZ4bwpc0_Ks77O1ApPjVJzlLnIVSvve5qVAq3q30E2xQrvusZGlIH8ADqxj8Ric
                              expires: Mon, 16 Dec 2024 19:59:45 GMT
                              last-modified: Mon, 16 Dec 2024 18:54:06 GMT
                              etag: "8fb2966e28e1e1be55addc8b0a86055c"
                              x-goog-generation: 1734375246688112
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 90780
                              x-goog-meta-goog-reserved-file-mtime: 1734375203
                              content-type: text/css
                              x-goog-hash: crc32c=7Z6Dhg==
                              x-goog-hash: md5=j7KWbijh4b5VrdyLCoYFXA==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 330755
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400110-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 7, 143
                              x-timer: S1734792740.864550,VS0,VE0
                              content-length: 90780
                            • flag-us
                              GET
                              https://www.mozilla.org/media/css/protocol-picto.cfee40a3cd36.css
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/css/protocol-picto.cfee40a3cd36.css HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/css,*/*;q=0.1
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: style
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Fri, 08 Nov 2024 17:45:42 GMT
                              last-modified: Thu, 07 Nov 2024 23:32:30 GMT
                              etag: "cfee40a3cd36f03547764c88fa2ca092"
                              x-goog-generation: 1731022350221562
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 4030
                              x-goog-meta-goog-reserved-file-mtime: 1731022303
                              content-type: text/css
                              x-goog-hash: crc32c=2139kw==
                              x-goog-hash: md5=z+5Ao8028DVHdkyI+iygkg==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY1a6HATCB1id4EmkIAzLaTlB_dL5_KrUYlJacvKjRS527yAM49ezT5XpuNWI4mZq8WRJzj1dogapA
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 279619
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300050-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 58, 24
                              x-timer: S1734792740.865015,VS0,VE0
                              content-length: 4030
                            • flag-us
                              GET
                              https://www.mozilla.org/media/css/firefox_welcome_page19_to_24.3bad9ee2f487.css
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/css/firefox_welcome_page19_to_24.3bad9ee2f487.css HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/css,*/*;q=0.1
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: style
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              x-goog-generation: 1730716141244462
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 5172
                              x-goog-meta-goog-reserved-file-mtime: 1730716110
                              x-goog-hash: crc32c=DLs7pA==
                              x-goog-hash: md5=O62e4vSH6qlnotDzyeiM0w==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY25MoVBNiiLsRJHX4d6tWWol8wqxqLBXZyfB3epEFVMA6eg3BJvGTvzR-U6iS3m7_Ing8A
                              server: UploadServer
                              expires: Fri, 08 Nov 2024 17:05:50 GMT
                              last-modified: Thu, 07 Nov 2024 23:32:26 GMT
                              etag: "3bad9ee2f487eaa967a2d0f3c9e88cd3"
                              content-type: text/css
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 1336427
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400024-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 5107, 15
                              x-timer: S1734792740.865124,VS0,VE0
                              content-length: 5172
                            • flag-us
                              GET
                              https://www.mozilla.org/media/js/gtm-snippet.b5b7c885f8fa.js
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/js/gtm-snippet.b5b7c885f8fa.js HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              x-guploader-uploadid: AFiumC4LuRbUhgBrPBmSTj9OiIlGu5v3Ypidrhz6b-ggkZN_xuXEJQfG4JS10mxmSn4tPtzM2yi1nkY
                              x-goog-generation: 1734478736544013
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 1377
                              x-goog-meta-goog-reserved-file-mtime: 1734478658
                              x-goog-hash: crc32c=UD4tow==
                              x-goog-hash: md5=tbfIhfj6+ouFjjEJUgeQAw==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              server: UploadServer
                              expires: Sat, 21 Dec 2024 14:08:46 GMT
                              last-modified: Tue, 17 Dec 2024 23:38:56 GMT
                              etag: "b5b7c885f8fafa8b858e310952079003"
                              content-type: text/javascript
                              content-encoding: br
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 6213
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400091-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 14, 16
                              x-timer: S1734792740.866568,VS0,VE0
                              vary: Accept-Encoding
                              content-length: 571
                            • flag-us
                              GET
                              https://www.mozilla.org/media/img/logos/firefox/logo-word-hor.f3b18871b657.svg
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/img/logos/firefox/logo-word-hor.f3b18871b657.svg HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              x-goog-generation: 1730911320232278
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 12219
                              x-goog-meta-goog-reserved-file-mtime: 1730911259
                              x-goog-hash: crc32c=u+doZg==
                              x-goog-hash: md5=87GIcbZX6/sbDrvyY/zVKQ==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY0MrHdUSp7IJWEt6j612Tg6dMEg_N6ulFAqFabaQl4YUCN6frNAE5V0Y7KONjThF0JXu8M
                              server: UploadServer
                              expires: Fri, 08 Nov 2024 17:45:42 GMT
                              last-modified: Thu, 07 Nov 2024 23:33:17 GMT
                              etag: "f3b18871b657ebfb1b0ebbf263fcd529"
                              content-type: image/svg+xml
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 899995
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400093-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 63614, 48
                              x-timer: S1734792740.867039,VS0,VE0
                              content-length: 12219
                            • flag-us
                              GET
                              https://www.mozilla.org/media/js/sentry.1fd5e9589639.js
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/js/sentry.1fd5e9589639.js HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Wed, 04 Dec 2024 21:20:42 GMT
                              last-modified: Wed, 04 Dec 2024 20:16:25 GMT
                              etag: "1fd5e95896399cf13ea22127d915f298"
                              x-goog-generation: 1733343385494266
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 58612
                              x-goog-meta-goog-reserved-file-mtime: 1733343289
                              content-type: text/javascript
                              x-goog-hash: crc32c=7aRTvg==
                              x-goog-hash: md5=H9XpWJY5nPE+oiEn2RXymA==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AFiumC5mj2y1RcYfUdYrqSsh_P3D1aLeGr8zXjgR87Kf_jovl6EbKGU2Wxnrymx4VtF09U8rCVqc17Dlag
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 299346
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400072-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 51, 584
                              x-timer: S1734792740.867312,VS0,VE0
                              content-length: 58612
                            • flag-us
                              GET
                              https://www.mozilla.org/media/js/lib.7cb1e204ce21.js
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/js/lib.7cb1e204ce21.js HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              x-goog-generation: 1731022413282771
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 17305
                              x-goog-meta-goog-reserved-file-mtime: 1731022303
                              x-goog-hash: crc32c=lR7rmw==
                              x-goog-hash: md5=fLHiBM4hqPvrEUegp0jEig==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY1GzUFgtgzi76ZtdmIPk2bs_6mKjydQffAKcF1nAfEDZvrQ9tm33jYXZaaEfCwPXTU5vBg
                              server: UploadServer
                              expires: Fri, 08 Nov 2024 17:45:42 GMT
                              last-modified: Thu, 07 Nov 2024 23:33:33 GMT
                              etag: "7cb1e204ce21a8fbeb1147a0a748c48a"
                              content-type: text/javascript
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 1388807
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400118-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 5965, 575
                              x-timer: S1734792740.867473,VS0,VE0
                              content-length: 17305
                            • flag-us
                              GET
                              https://www.mozilla.org/media/js/fxa.6cacc544775b.js
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/js/fxa.6cacc544775b.js HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Fri, 08 Nov 2024 17:45:39 GMT
                              last-modified: Thu, 07 Nov 2024 23:33:30 GMT
                              etag: "438fd3539700c54c0513d446b8124dbb"
                              x-goog-generation: 1731022410810439
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 5325
                              x-goog-meta-goog-reserved-file-mtime: 1731022303
                              content-type: text/javascript
                              x-goog-hash: crc32c=B2n5vA==
                              x-goog-hash: md5=Q4/TU5cAxUwFE9RGuBJNuw==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY0h3u4r8HHY56ctBe8UdlRZ-OykMdejGVOlSSa1gqY2R5Sk96hPeTqMo3-KI3yN59RntNY
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 2109845
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300069-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 3079, 545
                              x-timer: S1734792740.897476,VS0,VE0
                              content-length: 5325
                            • flag-us
                              GET
                              https://www.mozilla.org/media/js/data.438fd3539700.js
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/js/data.438fd3539700.js HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Fri, 08 Nov 2024 17:45:43 GMT
                              last-modified: Thu, 07 Nov 2024 23:33:32 GMT
                              etag: "6cacc544775b1336cda354ef7e018aeb"
                              x-goog-generation: 1731022412941844
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 7221
                              x-goog-meta-goog-reserved-file-mtime: 1731022303
                              content-type: text/javascript
                              x-goog-hash: crc32c=Y7tP8A==
                              x-goog-hash: md5=bKzFRHdbEzbNo1TvfgGK6w==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY2oGYwqb4wFTWcbO6htjDFjd0B3wArr48IrvxPbW-qG15co5ZnYNahJNq2pCOfFFs33rdjX6rPZ_w
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 895866
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300093-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 76824, 558
                              x-timer: S1734792740.897377,VS0,VE0
                              content-length: 7221
                            • flag-us
                              GET
                              https://www.mozilla.org/media/js/m24-ui.daf79f0fefd7.js
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/js/m24-ui.daf79f0fefd7.js HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              x-guploader-uploadid: AFiumC46P8QHm_akq4GHb5PhA5zlJUfto4y_uoVOsEC1HHmuiK-osTIzjZh_7wFsxWw2GacSwgrBvxE
                              expires: Mon, 16 Dec 2024 19:59:45 GMT
                              last-modified: Mon, 16 Dec 2024 18:55:15 GMT
                              etag: "daf79f0fefd7be0f0f68aed173907bf5"
                              x-goog-generation: 1734375315265078
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 14624
                              x-goog-meta-goog-reserved-file-mtime: 1734375203
                              content-type: text/javascript
                              x-goog-hash: crc32c=biMa/Q==
                              x-goog-hash: md5=2vefD+/Xvg8PaK7Rc5B79Q==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 417155
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300084-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 11, 592
                              x-timer: S1734792740.921271,VS0,VE0
                              content-length: 14624
                            • flag-us
                              GET
                              https://www.mozilla.org/media/js/glean.f0ce2425d2c8.js
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/js/glean.f0ce2425d2c8.js HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Fri, 08 Nov 2024 17:45:39 GMT
                              last-modified: Thu, 07 Nov 2024 23:33:33 GMT
                              etag: "f0ce2425d2c8ab50051d65653171bf84"
                              x-goog-generation: 1731022413170182
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 61358
                              x-goog-meta-goog-reserved-file-mtime: 1731022303
                              content-type: text/javascript
                              x-goog-hash: crc32c=maezaQ==
                              x-goog-hash: md5=8M4kJdLIq1AFHWVlMXG/hA==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY3H_MvT6ixHfOanL7jNjE6GoG5yO0Gb8meZXgq9d1P6JONSkwbwMsi2zzCCaMvaK2faepg
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 384852
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300041-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 13, 564
                              x-timer: S1734792740.935226,VS0,VE0
                              content-length: 61358
                            • flag-us
                              GET
                              https://www.mozilla.org/media/js/firefox_welcome_page19_to_24.87e13c35e608.js
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/js/firefox_welcome_page19_to_24.87e13c35e608.js HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Fri, 08 Nov 2024 17:45:42 GMT
                              last-modified: Thu, 07 Nov 2024 23:33:32 GMT
                              etag: "87e13c35e608573c041d42795b4e2294"
                              x-goog-generation: 1731022412190558
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 265
                              x-goog-meta-goog-reserved-file-mtime: 1731022303
                              content-type: text/javascript
                              x-goog-hash: crc32c=A378Jg==
                              x-goog-hash: md5=h+E8NeYIVzwEHUJ5W04ilA==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY3RSHNi4y8xvIoYqWS-9bS99E5K7uhv18paMqN-R_8JQEXBN97i_9yrdmui9ae7UqZ_Ai3RSo9t0w
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 979491
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300096-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 62, 13
                              x-timer: S1734792740.941276,VS0,VE0
                              content-length: 265
                            • flag-us
                              GET
                              https://www.mozilla.org/media/js/consent-banner.f74bb4c07d16.js
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/js/consent-banner.f74bb4c07d16.js HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Fri, 08 Nov 2024 17:45:39 GMT
                              last-modified: Thu, 07 Nov 2024 23:33:30 GMT
                              etag: "f74bb4c07d16eb6f0550a1c79647c1d0"
                              x-goog-generation: 1731022410661045
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 5903
                              x-goog-meta-goog-reserved-file-mtime: 1731022303
                              content-type: text/javascript
                              x-goog-hash: crc32c=oq9ixQ==
                              x-goog-hash: md5=90u0wH0W628FUKHHlkfB0A==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY0_PNthlDkcfeABGk-i__Y3IX0oAjNmBRaMCxcoXZ3sWVLKo37ZrBSGCo2kMe3iGiwW8XE_bR37YA
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              content-encoding: br
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:19 GMT
                              age: 190121
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300103-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 44674, 484
                              x-timer: S1734792740.949575,VS0,VE0
                              vary: Accept-Encoding
                              content-length: 1927
                            • flag-us
                              GET
                              https://www.mozilla.org/media/protocol/fonts/Inter-Bold.0564381b22b2.woff2
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/protocol/fonts/Inter-Bold.0564381b22b2.woff2 HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: identity
                              referer: https://www.mozilla.org/media/css/protocol-firefox.8fb2966e28e1.css
                              sec-fetch-dest: font
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Fri, 08 Nov 2024 17:45:39 GMT
                              last-modified: Thu, 07 Nov 2024 23:33:35 GMT
                              etag: "0564381b22b2c4760eb15bef0691993a"
                              x-goog-generation: 1731022415418380
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 95928
                              x-goog-meta-goog-reserved-file-mtime: 1731022301
                              content-type: font/woff2
                              x-goog-hash: crc32c=5fNudw==
                              x-goog-hash: md5=BWQ4GyKyxHYOsVvvBpGZOg==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY3ZLagCi4RuM-l3V6GLofYowzO_CeyiWu_HfbDtfleff39inysRHH5-_5J4F_EsQ0imuX8
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 261905
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300114-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 54313, 100
                              x-timer: S1734792740.072790,VS0,VE0
                              content-length: 95928
                            • flag-us
                              GET
                              https://www.mozilla.org/media/protocol/img/icons/social/x/white.7f50edd82090.svg
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/protocol/img/icons/social/x/white.7f50edd82090.svg HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              x-goog-generation: 1728650046912318
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 336
                              x-goog-meta-goog-reserved-file-mtime: 1728649928
                              x-goog-hash: crc32c=qQGVgQ==
                              x-goog-hash: md5=f1Dt2CCQvIdrG7PYQNBEsA==
                              x-goog-storage-class: STANDARD
                              x-guploader-uploadid: AHmUCY3BCg5aWnH3NlA7QRGK9FjbPe1isLGXON5pYprJj0JEVG4MGksa7ooSO_GwQBRtdfulo5ifi2Zgdg
                              server: UploadServer
                              access-control-expose-headers: *
                              expires: Fri, 08 Nov 2024 17:40:17 GMT
                              last-modified: Thu, 07 Nov 2024 23:33:41 GMT
                              etag: "7f50edd82090bc876b1bb3d840d044b0"
                              content-type: image/svg+xml
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 917656
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400031-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 153198, 530
                              x-timer: S1734792740.238842,VS0,VE0
                              content-length: 336
                            • flag-us
                              GET
                              https://www.mozilla.org/media/protocol/img/icons/social/instagram/white.a7014a6150b3.svg
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/protocol/img/icons/social/instagram/white.a7014a6150b3.svg HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              x-goog-generation: 1731022421142397
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 1509
                              x-goog-meta-goog-reserved-file-mtime: 1731022300
                              x-goog-hash: crc32c=NgPSCw==
                              x-goog-hash: md5=pwFKYVCz8VeyJWUKGpT4hQ==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY22E-rYtWr8qxHe_1uZNUBv0tRSHrcaYfuvcb53U1VbYO2x_r5IGrHZ338mANtc9gIlQIkc5vwkvg
                              server: UploadServer
                              expires: Fri, 08 Nov 2024 17:12:32 GMT
                              last-modified: Thu, 07 Nov 2024 23:33:41 GMT
                              etag: "a7014a6150b3f157b225650a1a94f885"
                              content-type: image/svg+xml
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 283507
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400031-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 22971, 525
                              x-timer: S1734792740.256888,VS0,VE0
                              content-length: 1509
                            • flag-us
                              GET
                              https://www.mozilla.org/media/protocol/img/icons/social/linkedin/white.cdc0e910cc1e.svg
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/protocol/img/icons/social/linkedin/white.cdc0e910cc1e.svg HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Fri, 08 Nov 2024 17:45:40 GMT
                              last-modified: Thu, 07 Nov 2024 23:33:41 GMT
                              etag: "cdc0e910cc1e8f7529c50c8cbb448da0"
                              x-goog-generation: 1731022421470105
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 528
                              x-goog-meta-goog-reserved-file-mtime: 1731022300
                              content-type: image/svg+xml
                              x-goog-hash: crc32c=ssNfMA==
                              x-goog-hash: md5=zcDpEMwej3UpxQyMu0SNoA==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY16ZvPi4e90XWWU4gvPNOmUUx43gGx9eMkRwi7oVHINnLpqVhJmjljQASzam6Rp0IK9s_lBOIPqnw
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 397013
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300100-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 9, 532
                              x-timer: S1734792740.329438,VS0,VE0
                              content-length: 528
                            • flag-us
                              GET
                              https://www.mozilla.org/media/protocol/img/icons/social/tiktok/white.599403de7ac0.svg
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/protocol/img/icons/social/tiktok/white.599403de7ac0.svg HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              x-goog-generation: 1730305430258618
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 688
                              x-goog-meta-goog-reserved-file-mtime: 1730305348
                              x-goog-hash: crc32c=0/PXBQ==
                              x-goog-hash: md5=WZQD3nrA/OgqNXVzUHbxAg==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY2pKsM0QESnhVY07cg9hBo6zhRTS0BBEkzjWxcX0ObwC9MZc-9HEJfV6XzVDF07kw1pPok
                              server: UploadServer
                              expires: Mon, 04 Nov 2024 15:02:20 GMT
                              last-modified: Mon, 04 Nov 2024 10:29:47 GMT
                              etag: "599403de7ac0fce82a3575735076f102"
                              content-type: image/svg+xml
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 1474291
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400118-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 17, 531
                              x-timer: S1734792740.376175,VS0,VE0
                              content-length: 688
                            • flag-us
                              GET
                              https://www.mozilla.org/media/protocol/img/icons/social/spotify/white.aa5334e85bae.svg
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/protocol/img/icons/social/spotify/white.aa5334e85bae.svg HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Fri, 08 Nov 2024 17:45:42 GMT
                              last-modified: Thu, 07 Nov 2024 23:33:41 GMT
                              etag: "aa5334e85baea7187c2e1d89f8dc90cc"
                              x-goog-generation: 1731022421370165
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 677
                              x-goog-meta-goog-reserved-file-mtime: 1731022300
                              content-type: image/svg+xml
                              x-goog-hash: crc32c=YU0IUQ==
                              x-goog-hash: md5=qlM06Fuupxh8Lh2J+NyQzA==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY27ME0omcS9RA3_QhZZzZpMWfSvGm3yZTBcpcbCp0PEgSqVThoGRDbvZteydzaxvu09DZPX2hnw1w
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              content-encoding: br
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 200934
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300023-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 51416, 491
                              x-timer: S1734792740.409685,VS0,VE0
                              vary: Accept-Encoding
                              content-length: 389
                            • flag-us
                              GET
                              https://www.mozilla.org/media/protocol/img/icons/social/youtube/white.4f314c43c69d.svg
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/protocol/img/icons/social/youtube/white.4f314c43c69d.svg HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              x-goog-generation: 1725999573743219
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 472
                              x-goog-meta-goog-reserved-file-mtime: 1725999459
                              x-goog-hash: crc32c=FcwtWA==
                              x-goog-hash: md5=TzFMQ8adgn0lO609uyKYXA==
                              x-goog-storage-class: STANDARD
                              x-guploader-uploadid: AHmUCY0uopcvCYTxjihD10DFgtNwk4qje25TXRe8YqKYn1KwtzDr5Igc4oh59LVhls0gRuOWIRM
                              server: UploadServer
                              access-control-expose-headers: *
                              expires: Mon, 04 Nov 2024 14:54:16 GMT
                              last-modified: Mon, 04 Nov 2024 10:29:47 GMT
                              etag: "4f314c43c69d827d253bad3dbb22985c"
                              content-type: image/svg+xml
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 1428923
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300046-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 65, 529
                              x-timer: S1734792740.410532,VS0,VE0
                              content-length: 472
                            • flag-us
                              GET
                              https://www.mozilla.org/media/img/icons/m24-small/globe-white.a76258f6a4cc.svg
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/img/icons/m24-small/globe-white.a76258f6a4cc.svg HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Fri, 06 Dec 2024 20:55:19 GMT
                              last-modified: Fri, 06 Dec 2024 19:51:01 GMT
                              etag: "a76258f6a4cc46b2eed6225b15e90f96"
                              x-goog-generation: 1733514661025634
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 778
                              x-goog-meta-goog-reserved-file-mtime: 1733514601
                              content-type: image/svg+xml
                              x-goog-hash: crc32c=0MhJAg==
                              x-goog-hash: md5=p2JY9qTMRrLu1iJbFekPlg==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AFiumC7RqEyfDfBbID4WEmwefwMGAaWjyPruxsiVJrHkmNAxm20JI7pYAu0cikRiwDw7um_26Uo
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 254775
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400081-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 25, 511
                              x-timer: S1734792740.411838,VS0,VE0
                              content-length: 778
                            • flag-us
                              GET
                              https://www.mozilla.org/media/img/icons/m24-small/down-caret-white.3aab868855c7.svg
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/img/icons/m24-small/down-caret-white.3aab868855c7.svg HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Fri, 06 Dec 2024 20:55:19 GMT
                              last-modified: Fri, 06 Dec 2024 19:51:00 GMT
                              etag: "3aab868855c7c2facfd1131b0b31015f"
                              x-goog-generation: 1733514660876872
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 183
                              x-goog-meta-goog-reserved-file-mtime: 1733514601
                              content-type: image/svg+xml
                              x-goog-hash: crc32c=o3yX4A==
                              x-goog-hash: md5=OquGiFXHwvrP0RMbCzEBXw==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AFiumC7_GwtG4OcrVkzLSteSpwedug5Dj-WYAcfw1NX17TX_-JLql3yqxUooyjvWI2TIa03sOiIDZa5A_A
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 1191421
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300092-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 24, 511
                              x-timer: S1734792740.414069,VS0,VE0
                              content-length: 183
                            • flag-us
                              GET
                              https://www.mozilla.org/media/protocol/fonts/Inter-Regular.d55e957612a3.woff2
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/protocol/fonts/Inter-Regular.d55e957612a3.woff2 HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: identity
                              referer: https://www.mozilla.org/media/css/protocol-firefox.8fb2966e28e1.css
                              sec-fetch-dest: font
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Fri, 08 Nov 2024 17:45:40 GMT
                              last-modified: Thu, 07 Nov 2024 23:33:35 GMT
                              etag: "d55e957612a3b2a373925d920f4af6b1"
                              x-goog-generation: 1731022415608542
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 88816
                              x-goog-meta-goog-reserved-file-mtime: 1731022301
                              content-type: font/woff2
                              x-goog-hash: crc32c=2hy73A==
                              x-goog-hash: md5=1V6VdhKjsqNzkl2SD0r2sQ==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY2OqZpcsChGRd9Gm0qxhwn8cr4hBRQefkZlr60zFRXB0tm3heRMbD5kjcYLR1FBw4vM6fNbBVhqxQ
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 274369
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300091-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 6207, 100
                              x-timer: S1734792740.418109,VS0,VE0
                              content-length: 88816
                            • flag-us
                              GET
                              https://www.mozilla.org/media/protocol/fonts/Metropolis-Bold.6a80125e795a.woff2
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/protocol/fonts/Metropolis-Bold.6a80125e795a.woff2 HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: identity
                              referer: https://www.mozilla.org/media/css/protocol-firefox.8fb2966e28e1.css
                              sec-fetch-dest: font
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Fri, 08 Nov 2024 17:45:40 GMT
                              last-modified: Thu, 07 Nov 2024 23:33:35 GMT
                              etag: "6a80125e795aa81c6f251aa83e44062b"
                              x-goog-generation: 1731022415569053
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 16728
                              x-goog-meta-goog-reserved-file-mtime: 1731022301
                              content-type: font/woff2
                              x-goog-hash: crc32c=lWtUXA==
                              x-goog-hash: md5=aoASXnlaqBxvJRqoPkQGKw==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY2HL6XqeuWIbDAn5DrK9hwp7-prmgGYb9GRQ53i2_IzZ2u2PznZXWHKrvEiqEx8RdGVFOUDJGmx5w
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 402703
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300081-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 39, 104
                              x-timer: S1734792740.419087,VS0,VE0
                              content-length: 16728
                            • flag-us
                              GET
                              https://www.mozilla.org/media/fonts/m24/mozilla-text/MozillaText-SemiBold.c9ce5296db65.woff2
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/fonts/m24/mozilla-text/MozillaText-SemiBold.c9ce5296db65.woff2 HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: identity
                              referer: https://www.mozilla.org/media/css/m24-root.77a146bcaf17.css
                              sec-fetch-dest: font
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Wed, 04 Dec 2024 22:11:28 GMT
                              last-modified: Wed, 04 Dec 2024 20:15:31 GMT
                              etag: "c9ce5296db657f9f585c68890e99c39f"
                              x-goog-generation: 1733343331621829
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 26260
                              x-goog-meta-goog-reserved-file-mtime: 1733343287
                              content-type: font/woff2
                              x-goog-hash: crc32c=yAx31Q==
                              x-goog-hash: md5=yc5Slttlf59YXGiJDpnDnw==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
                              x-guploader-uploadid: AFiumC5vmJvAeWRXsJFErghWiEG4iEHmMornYYXEv6Uni1jeZMAhYx5Rvv9fGXo37GpQQdxWzXE
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 174334
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300073-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 4473, 407
                              x-timer: S1734792740.420122,VS0,VE0
                              content-length: 26260
                            • flag-us
                              GET
                              https://www.mozilla.org/media/fonts/m24/mozilla-text/MozillaText-Regular.3fa5c88b0954.woff2
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/fonts/m24/mozilla-text/MozillaText-Regular.3fa5c88b0954.woff2 HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: identity
                              referer: https://www.mozilla.org/media/css/m24-root.77a146bcaf17.css
                              sec-fetch-dest: font
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Wed, 04 Dec 2024 22:11:28 GMT
                              last-modified: Wed, 04 Dec 2024 20:15:31 GMT
                              etag: "3fa5c88b095446f313c63d4b24bbffa0"
                              x-goog-generation: 1733343331673358
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 26192
                              x-goog-meta-goog-reserved-file-mtime: 1733343287
                              content-type: font/woff2
                              x-goog-hash: crc32c=28WjSg==
                              x-goog-hash: md5=P6XIiwlURvMTxj1LJLv/oA==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
                              x-guploader-uploadid: AFiumC712cXVahqS46rB0x39MjpVvaD5zBFupz6-NGzoI0tC8FES1v_HBiCizhxCWs7zUHenyzgE67QEfQ
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 395659
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400027-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 32, 537
                              x-timer: S1734792740.420848,VS0,VE0
                              content-length: 26192
                            • flag-us
                              GET
                              https://www.mozilla.org/media/img/firefox/welcome/page20-21/back-up.b351cf7c2c5c.svg
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/img/firefox/welcome/page20-21/back-up.b351cf7c2c5c.svg HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Wed, 27 Nov 2024 04:52:51 GMT
                              last-modified: Mon, 25 Nov 2024 09:36:11 GMT
                              etag: "b351cf7c2c5c6c4cb8ca7d4c87cf9b8d"
                              x-goog-generation: 1732527371210244
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 451
                              x-goog-meta-goog-reserved-file-mtime: 1732527322
                              content-type: image/svg+xml
                              x-goog-hash: crc32c=6u6obg==
                              x-goog-hash: md5=s1HPfCxcbEy4yn1Mh8+bjQ==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AFiumC4MF7QpqG7XuDxbfqPEEYAX7d74SrVTFryycZyMbXAllKwWKLLVzXFu9AFiZtIOrUMVAfoPlw2GEA
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 1387753
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400044-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 2, 10
                              x-timer: S1734792740.422001,VS0,VE0
                              content-length: 451
                            • flag-us
                              GET
                              https://www.mozilla.org/media/img/firefox/welcome/page20-21/add-ons.809f56bff087.svg
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/img/firefox/welcome/page20-21/add-ons.809f56bff087.svg HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Mon, 11 Nov 2024 14:11:16 GMT
                              last-modified: Fri, 08 Nov 2024 20:07:57 GMT
                              etag: "809f56bff08721ea127dd5beb7868861"
                              x-goog-generation: 1731096477365294
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 1012
                              x-goog-meta-goog-reserved-file-mtime: 1731096409
                              content-type: image/svg+xml
                              x-goog-hash: crc32c=5ObDyw==
                              x-goog-hash: md5=gJ9Wv/CHIeoSfdW+t4aIYQ==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY2VqJpiKH3Y_PL8msRsVuCjEXnkduQysq_5HgnltKZoGpoXrIohi2eftltQl4UQ2A85QXRRD5I8hw
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 261829
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300066-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 2, 10
                              x-timer: S1734792740.425526,VS0,VE0
                              content-length: 1012
                            • flag-us
                              GET
                              https://www.mozilla.org/media/img/firefox/welcome/page20-21/community.bf0cb1c38902.svg
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/img/firefox/welcome/page20-21/community.bf0cb1c38902.svg HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Mon, 11 Nov 2024 14:11:16 GMT
                              last-modified: Fri, 08 Nov 2024 20:07:57 GMT
                              etag: "bf0cb1c389027f75af50b39848de917a"
                              x-goog-generation: 1731096477195663
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 896
                              x-goog-meta-goog-reserved-file-mtime: 1731096409
                              content-type: image/svg+xml
                              x-goog-hash: crc32c=ajmDfg==
                              x-goog-hash: md5=vwyxw4kCf3WvULOYSN6Reg==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY1StwjRkgOko2XubfUs-KE18Zz92dl10xwKPkOtabWoHVJqFB0v1Xyfc5cPhZycsc3rtDo
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 1387753
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400108-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 3, 10
                              x-timer: S1734792740.428282,VS0,VE0
                              content-length: 896
                            • flag-us
                              GET
                              https://www.mozilla.org/media/img/favicons/firefox/browser/favicon-196x196.59e3822720be.png
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/img/favicons/firefox/browser/favicon-196x196.59e3822720be.png HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              x-goog-generation: 1727094498247922
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 15086
                              x-goog-meta-goog-reserved-file-mtime: 1727094460
                              x-goog-hash: crc32c=E9h0Yg==
                              x-goog-hash: md5=8JNATAE1nK2dDy+1FLZCgQ==
                              x-goog-storage-class: STANDARD
                              x-guploader-uploadid: AHmUCY0HLb_EIXPPU7mp8aTiJ2VMVZsvMoPu3MACA4q7CJWr-8L_LC6UkWSf0_DDVYeULOH4kzY
                              server: UploadServer
                              access-control-expose-headers: *
                              expires: Mon, 04 Nov 2024 15:06:10 GMT
                              last-modified: Mon, 04 Nov 2024 10:29:06 GMT
                              etag: "f093404c01359cad9d0f2fb514b64281"
                              content-type: image/vnd.microsoft.icon
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 372405
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-kbfi7400080-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 4, 279
                              x-timer: S1734792740.472468,VS0,VE0
                              content-length: 15086
                            • flag-us
                              GET
                              https://www.mozilla.org/media/img/favicons/firefox/browser/favicon.f093404c0135.ico
                              firefox.exe
                              Remote address:
                              151.101.3.19:443
                              Request
                              GET /media/img/favicons/firefox/browser/favicon.f093404c0135.ico HTTP/2.0
                              host: www.mozilla.org
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.mozilla.org/en-US/firefox/welcome/21/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              expires: Fri, 08 Nov 2024 17:45:39 GMT
                              last-modified: Thu, 07 Nov 2024 23:32:38 GMT
                              etag: "59e3822720bedcc45ca5e6e6d3220ea9"
                              x-goog-generation: 1731022358512287
                              x-goog-metageneration: 1
                              x-goog-stored-content-encoding: identity
                              x-goog-stored-content-length: 8050
                              x-goog-meta-goog-reserved-file-mtime: 1731022301
                              content-type: image/png
                              x-goog-hash: crc32c=ACeoNw==
                              x-goog-hash: md5=WeOCJyC+3MRcpebm0yIOqQ==
                              x-goog-storage-class: STANDARD
                              access-control-expose-headers: *
                              x-guploader-uploadid: AHmUCY3PuzyciJ0OwxWlmKawQgyY3D8QgFLNDswsZK3glFrOH0SRNC_qbdOfe4DZC_I-4n68J5RrunUPww
                              server: UploadServer
                              via: 1.1 varnish, 1.1 varnish
                              cache-control: max-age=315360000, public, immutable
                              accept-ranges: bytes
                              date: Sat, 21 Dec 2024 14:52:20 GMT
                              age: 256080
                              access-control-allow-origin: https://prod.cms.bedrock.prod.webservices.mozgcp.net
                              x-served-by: cache-bfi-krnt7300105-BFI, cache-lon420121-LON
                              x-cache: HIT, HIT
                              x-cache-hits: 3, 148
                              x-timer: S1734792740.472491,VS0,VE0
                              content-length: 8050
                            • flag-us
                              DNS
                              www-mozilla.fastly-edge.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              www-mozilla.fastly-edge.com
                              IN A
                              Response
                              www-mozilla.fastly-edge.com
                              IN A
                              151.101.195.19
                              www-mozilla.fastly-edge.com
                              IN A
                              151.101.3.19
                              www-mozilla.fastly-edge.com
                              IN A
                              151.101.131.19
                              www-mozilla.fastly-edge.com
                              IN A
                              151.101.67.19
                            • flag-us
                              DNS
                              www-mozilla.fastly-edge.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              www-mozilla.fastly-edge.com
                              IN AAAA
                              Response
                              www-mozilla.fastly-edge.com
                              IN AAAA
                              2a04:4e42:600::787
                              www-mozilla.fastly-edge.com
                              IN AAAA
                              2a04:4e42:400::787
                              www-mozilla.fastly-edge.com
                              IN AAAA
                              2a04:4e42:200::787
                              www-mozilla.fastly-edge.com
                              IN AAAA
                              2a04:4e42::787
                            • flag-us
                              DNS
                              spocs.getpocket.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              spocs.getpocket.com
                              IN A
                              Response
                              spocs.getpocket.com
                              IN CNAME
                              prod.ads.prod.webservices.mozgcp.net
                              prod.ads.prod.webservices.mozgcp.net
                              IN A
                              34.117.188.166
                            • flag-us
                              DNS
                              firefox-api-proxy.cdn.mozilla.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              firefox-api-proxy.cdn.mozilla.net
                              IN A
                              Response
                              firefox-api-proxy.cdn.mozilla.net
                              IN CNAME
                              firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net
                              firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net
                              IN A
                              34.149.97.1
                            • flag-us
                              DNS
                              prod.ads.prod.webservices.mozgcp.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              prod.ads.prod.webservices.mozgcp.net
                              IN A
                              Response
                              prod.ads.prod.webservices.mozgcp.net
                              IN A
                              34.117.188.166
                            • flag-us
                              DNS
                              shavar.prod.mozaws.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              shavar.prod.mozaws.net
                              IN A
                              Response
                              shavar.prod.mozaws.net
                              IN A
                              52.40.120.141
                              shavar.prod.mozaws.net
                              IN A
                              44.240.87.158
                              shavar.prod.mozaws.net
                              IN A
                              44.228.225.150
                            • flag-us
                              DNS
                              firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net
                              IN A
                              Response
                              firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net
                              IN A
                              34.149.97.1
                            • flag-us
                              DNS
                              prod.content-signature-chains.prod.webservices.mozgcp.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              prod.content-signature-chains.prod.webservices.mozgcp.net
                              IN A
                              Response
                              prod.content-signature-chains.prod.webservices.mozgcp.net
                              IN A
                              34.160.144.191
                            • flag-us
                              DNS
                              prod.remote-settings.prod.webservices.mozgcp.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              prod.remote-settings.prod.webservices.mozgcp.net
                              IN A
                              Response
                              prod.remote-settings.prod.webservices.mozgcp.net
                              IN A
                              34.149.100.209
                            • flag-us
                              DNS
                              prod.ads.prod.webservices.mozgcp.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              prod.ads.prod.webservices.mozgcp.net
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              shavar.prod.mozaws.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              shavar.prod.mozaws.net
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net
                              IN AAAA
                              Response
                              firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net
                              IN AAAA
                              2600:1901:0:74e4::
                            • flag-us
                              DNS
                              prod.content-signature-chains.prod.webservices.mozgcp.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              prod.content-signature-chains.prod.webservices.mozgcp.net
                              IN AAAA
                              Response
                              prod.content-signature-chains.prod.webservices.mozgcp.net
                              IN AAAA
                              2600:1901:0:92a9::
                            • flag-us
                              DNS
                              prod.remote-settings.prod.webservices.mozgcp.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              prod.remote-settings.prod.webservices.mozgcp.net
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              19.3.101.151.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              19.3.101.151.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              150.225.228.44.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              150.225.228.44.in-addr.arpa
                              IN PTR
                              Response
                              150.225.228.44.in-addr.arpa
                              IN PTR
                              ec2-44-228-225-150 us-west-2compute amazonawscom
                            • flag-us
                              DNS
                              150.225.228.44.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              150.225.228.44.in-addr.arpa
                              IN PTR
                              Response
                              150.225.228.44.in-addr.arpa
                              IN PTR
                              ec2-44-228-225-150 us-west-2compute amazonawscom
                            • flag-us
                              DNS
                              www.google.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              www.google.com
                              IN A
                              Response
                              www.google.com
                              IN A
                              172.217.20.164
                            • flag-us
                              DNS
                              www.google.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              www.google.com
                              IN A
                              Response
                              www.google.com
                              IN A
                              172.217.20.164
                            • flag-fr
                              GET
                              https://www.google.com/search?client=firefox-b-d&q=hashtag
                              firefox.exe
                              Remote address:
                              172.217.20.164:443
                              Request
                              GET /search?client=firefox-b-d&q=hashtag HTTP/2.0
                              host: www.google.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              upgrade-insecure-requests: 1
                              sec-fetch-dest: document
                              sec-fetch-mode: navigate
                              sec-fetch-site: none
                              sec-fetch-user: ?1
                              te: trailers
                              Response
                              HTTP/2.0 429
                              date: Sat, 21 Dec 2024 14:52:28 GMT
                              pragma: no-cache
                              expires: Fri, 01 Jan 1990 00:00:00 GMT
                              cache-control: no-store, no-cache, must-revalidate
                              content-type: text/html
                              server: HTTP server (unknown)
                              content-length: 3195
                              content-type: text/html
                              content-length: 3195
                            • flag-fr
                              GET
                              https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fclient%3Dfirefox-b-d%26q%3Dhashtag&q=EgS117BTGKysm7sGIjCCffrXHOhN71vu-jeogGdygaVg01jum0_3L9xnIs_Hys3M9ndSkUpFfEq02Grtt_QyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
                              firefox.exe
                              Remote address:
                              172.217.20.164:443
                              Request
                              GET /sorry/index?continue=https://www.google.com/search%3Fclient%3Dfirefox-b-d%26q%3Dhashtag&q=EgS117BTGKysm7sGIjCCffrXHOhN71vu-jeogGdygaVg01jum0_3L9xnIs_Hys3M9ndSkUpFfEq02Grtt_QyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/2.0
                              host: www.google.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              cookie: AEC=AZ6Zc-XzWPeKu72wWC4eD92seuWVOi1ImRv8xTzdejBNq-XrQC8X7NdnyAo
                              cookie: __Secure-ENID=24.SE=R7h537Fi8ChrfWdHNR5pnp7bSgAkcHpH6P3vPzS7IZtE4bfXloX7fdvyOD2c-f9ZGuphVlcznFmNURB17w95aHSQbwlzZSwq89VFu-N3DRh2N5cCbT-zTe1Rch3U5kb3Nf9N9qnDaKBOV1gsCfEl1epUYkA_RU4aLiQUuQt1l0f52wNfmow71cFJ-90ObLIQZ9Q2jHIu
                              upgrade-insecure-requests: 1
                              sec-fetch-dest: document
                              sec-fetch-mode: navigate
                              sec-fetch-site: none
                              sec-fetch-user: ?1
                              te: trailers
                            • flag-fr
                              GET
                              https://www.google.com/recaptcha/api.js
                              firefox.exe
                              Remote address:
                              172.217.20.164:443
                              Request
                              GET /recaptcha/api.js HTTP/2.0
                              host: www.google.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fclient%3Dfirefox-b-d%26q%3Dhashtag&q=EgS117BTGKysm7sGIjCCffrXHOhN71vu-jeogGdygaVg01jum0_3L9xnIs_Hys3M9ndSkUpFfEq02Grtt_QyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
                              cookie: AEC=AZ6Zc-XzWPeKu72wWC4eD92seuWVOi1ImRv8xTzdejBNq-XrQC8X7NdnyAo
                              cookie: __Secure-ENID=24.SE=R7h537Fi8ChrfWdHNR5pnp7bSgAkcHpH6P3vPzS7IZtE4bfXloX7fdvyOD2c-f9ZGuphVlcznFmNURB17w95aHSQbwlzZSwq89VFu-N3DRh2N5cCbT-zTe1Rch3U5kb3Nf9N9qnDaKBOV1gsCfEl1epUYkA_RU4aLiQUuQt1l0f52wNfmow71cFJ-90ObLIQZ9Q2jHIu
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                            • flag-us
                              DNS
                              www.google.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              www.google.com
                              IN A
                              Response
                              www.google.com
                              IN A
                              172.217.20.164
                            • flag-us
                              DNS
                              www.google.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              www.google.com
                              IN AAAA
                              Response
                              www.google.com
                              IN AAAA
                              2a00:1450:4007:80c::2004
                            • flag-us
                              DNS
                              www.google.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              www.google.com
                              IN AAAA
                              Response
                              www.google.com
                              IN AAAA
                              2a00:1450:4007:80c::2004
                            • flag-us
                              DNS
                              164.20.217.172.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              164.20.217.172.in-addr.arpa
                              IN PTR
                              Response
                              164.20.217.172.in-addr.arpa
                              IN PTR
                              par10s49-in-f41e100net
                              164.20.217.172.in-addr.arpa
                              IN PTR
                              waw02s07-in-f4�H
                              164.20.217.172.in-addr.arpa
                              IN PTR
                              waw02s07-in-f164�H
                            • flag-us
                              DNS
                              195.20.217.172.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              195.20.217.172.in-addr.arpa
                              IN PTR
                              Response
                              195.20.217.172.in-addr.arpa
                              IN PTR
                              par10s50-in-f31e100net
                              195.20.217.172.in-addr.arpa
                              IN PTR
                              waw02s08-in-f195�H
                              195.20.217.172.in-addr.arpa
                              IN PTR
                              waw02s08-in-f3�H
                            • flag-us
                              DNS
                              163.20.217.172.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              163.20.217.172.in-addr.arpa
                              IN PTR
                              Response
                              163.20.217.172.in-addr.arpa
                              IN PTR
                              par10s49-in-f31e100net
                              163.20.217.172.in-addr.arpa
                              IN PTR
                              waw02s07-in-f163�H
                              163.20.217.172.in-addr.arpa
                              IN PTR
                              waw02s07-in-f3�H
                            • flag-us
                              DNS
                              ddg.gg
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              ddg.gg
                              IN A
                              Response
                              ddg.gg
                              IN A
                              52.142.124.215
                            • flag-us
                              DNS
                              ddg.gg
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              ddg.gg
                              IN A
                              Response
                              ddg.gg
                              IN A
                              52.142.124.215
                            • flag-ie
                              GET
                              http://ddg.gg/
                              firefox.exe
                              Remote address:
                              52.142.124.215:80
                              Request
                              GET / HTTP/1.1
                              Host: ddg.gg
                              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
                              Accept-Language: en-US,en;q=0.5
                              Accept-Encoding: gzip, deflate
                              Connection: keep-alive
                              Upgrade-Insecure-Requests: 1
                              Response
                              HTTP/1.1 301 Moved Permanently
                              Server: nginx
                              Date: Sat, 21 Dec 2024 14:52:38 GMT
                              Content-Type: text/html
                              Content-Length: 162
                              Connection: keep-alive
                              Location: https://duckduckgo.com/
                              Strict-Transport-Security: max-age=31536000
                              Expires: Sun, 21 Dec 2025 14:52:38 GMT
                              Cache-Control: max-age=31536000
                            • flag-us
                              DNS
                              ddg.gg
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              ddg.gg
                              IN A
                              Response
                              ddg.gg
                              IN A
                              52.142.124.215
                            • flag-us
                              DNS
                              ddg.gg
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              ddg.gg
                              IN A
                              Response
                              ddg.gg
                              IN A
                              52.142.124.215
                            • flag-us
                              DNS
                              ddg.gg
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              ddg.gg
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              ddg.gg
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              ddg.gg
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              215.124.142.52.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              215.124.142.52.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              duckduckgo.com
                              IN A
                              Response
                              duckduckgo.com
                              IN A
                              52.142.124.215
                            • flag-ie
                              GET
                              https://duckduckgo.com/
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET / HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              upgrade-insecure-requests: 1
                              sec-fetch-dest: document
                              sec-fetch-mode: navigate
                              sec-fetch-site: none
                              sec-fetch-user: ?1
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: text/html; charset=UTF-8
                              content-length: 10582
                              vary: Accept-Encoding
                              etag: "6765f126-2956"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sat, 21 Dec 2024 14:52:37 GMT
                              cache-control: no-cache
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/font/ProximaNova-RegIt-webfont.woff2
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/font/ProximaNova-RegIt-webfont.woff2 HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: font
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: font/woff2
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f125-a628"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/font/ProximaNova-ExtraBold-webfont.woff2
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/font/ProximaNova-ExtraBold-webfont.woff2 HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: font
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: font/woff2
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f125-a6c4"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/font/ProximaNova-Reg-webfont.woff2
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/font/ProximaNova-Reg-webfont.woff2 HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: font
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: font/woff2
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f125-a3b4"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/font/ProximaNova-Sbold-webfont.woff2
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/font/ProximaNova-Sbold-webfont.woff2 HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: font
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: font/woff2
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f125-a358"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/font/ProximaNova-Bold-webfont.woff2
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/font/ProximaNova-Bold-webfont.woff2 HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: font
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: font/woff2
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f125-a598"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/css/c64e3cce46526948.css
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/css/c64e3cce46526948.css HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/css,*/*;q=0.1
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: style
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: text/css
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-b76d"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/css/5fd9baeedf731742.css
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/css/5fd9baeedf731742.css HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/css,*/*;q=0.1
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: style
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: text/css
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-7ba8"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/css/a907368db829f88f.css
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/css/a907368db829f88f.css HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/css,*/*;q=0.1
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: style
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: text/css
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-619c"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/css/d7a778b86846a7fd.css
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/css/d7a778b86846a7fd.css HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/css,*/*;q=0.1
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: style
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: text/css
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-16a35"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/css/de1cb19794fd83e5.css
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/css/de1cb19794fd83e5.css HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/css,*/*;q=0.1
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: style
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: text/css
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-6d94"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/webpack-64c3d5bb8874f665.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/webpack-64c3d5bb8874f665.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-12386"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/framework-f8115f7fae64930e.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/framework-f8115f7fae64930e.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-1fbd3"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/main-d4b13818a262f8be.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/main-d4b13818a262f8be.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-18714"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/pages/_app-52b84a5dde876133.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/pages/_app-52b84a5dde876133.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-617de"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/12636-61ed9ec1b956b494.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/12636-61ed9ec1b956b494.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-15c2"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/41664-0c7a5cf8f744007e.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/41664-0c7a5cf8f744007e.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-168c"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/97179-5b6e68d94b3b6b3a.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/97179-5b6e68d94b3b6b3a.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-1fca"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/27575-a47bc7c3d905054b.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/27575-a47bc7c3d905054b.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-517f"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/81125-b74d1b6f4908497b.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/81125-b74d1b6f4908497b.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-6bc9"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/53343-e1b28b68883ff9df.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/53343-e1b28b68883ff9df.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-18fd"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/62957-7d68a586e2f806a1.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/62957-7d68a586e2f806a1.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-1f52"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/22868-cbd9348122d77c1b.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/22868-cbd9348122d77c1b.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-1340"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/25892-f67fb82768f62af4.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/25892-f67fb82768f62af4.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-1489f"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/41917-1597d070817d9087.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/41917-1597d070817d9087.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-61cc0"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/73381-b9157a6253c5d3e8.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/73381-b9157a6253c5d3e8.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-68cf"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/64149-6960cae1da870bb4.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/64149-6960cae1da870bb4.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-13343"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/26634-d8525d31fbb19710.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/26634-d8525d31fbb19710.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-42ef"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/59349-2b554244a2ef63c8.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/59349-2b554244a2ef63c8.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-27681"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/95639-17f30bca65bd9ea4.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/95639-17f30bca65bd9ea4.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-42a2f"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/55204-ae0eef26f1bc26ef.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/55204-ae0eef26f1bc26ef.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-e5b7"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/pages/%5Blocale%5D-9c044649ecb45850.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/pages/%5Blocale%5D-9c044649ecb45850.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-17d"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/oD1VI4kCyPoypb_amISYf/_buildManifest.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/oD1VI4kCyPoypb_amISYf/_buildManifest.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f125-55ba"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/oD1VI4kCyPoypb_amISYf/_ssgManifest.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/oD1VI4kCyPoypb_amISYf/_ssgManifest.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f125-1338"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/firefox-extension.8e658fcd.svg
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/firefox-extension.8e658fcd.svg HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/svg+xml
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f125-4906"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 150022
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-24a06"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/backgrounds/homepage-btf-mobile-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/backgrounds/homepage-btf-mobile-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 127123
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-1f093"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/macos.61889438.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/macos.61889438.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 2769
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-ad1"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/windows.477fa143.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/windows.477fa143.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 509
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-1fd"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/page_home_impression?5689491&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/page_home_impression?5689491&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:37 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/app-store.501fe17a.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/app-store.501fe17a.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 13056
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-3300"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/play-store.e5d5ed36.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/play-store.e5d5ed36.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 2134
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-856"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/chrome-lg.a4859fb2.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/chrome-lg.a4859fb2.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 11271
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-2c07"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/edge-lg.36af7682.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/edge-lg.36af7682.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 13743
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-35af"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/firefox-lg.8efad702.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/firefox-lg.8efad702.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 13229
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-33ad"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/opera-lg.237c4418.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/opera-lg.237c4418.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 2945
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-b81"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/search-protection-ios-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/search-protection-ios-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 107143
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-1a287"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 182030
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-2c70e"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 47334
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-b8e6"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/web-protection-ios-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/web-protection-ios-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 105834
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-19d6a"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 40423
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-9de7"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 64366
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-fb6e"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/email-protection-ios-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/email-protection-ios-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 58141
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-e31d"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/chunks/78597.c875db33140f7df5.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/chunks/78597.c875db33140f7df5.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/x-javascript
                              last-modified: Fri, 20 Dec 2024 22:35:16 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f124-3ce"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/backgrounds/homepage-btf-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/backgrounds/homepage-btf-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 57621
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-e115"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/flame-narrow.70589b7c.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/flame-narrow.70589b7c.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 18809
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-4979"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/flame.1241f020.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/flame.1241f020.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 56916
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-de54"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/burn@2x.be0bd36d.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/burn@2x.be0bd36d.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 75467
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-126cb"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/flame@2x.40e1cfa0.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/flame@2x.40e1cfa0.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 4465
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-1171"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/widget-small@2x.07c865df.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/widget-small@2x.07c865df.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 6508
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-196c"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/widget-big@2x.a260ccf6.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/widget-big@2x.a260ccf6.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 18003
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-4653"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/night@2x.4ca79636.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/night@2x.4ca79636.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 4011
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-fab"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/dark-mode@2x.3e150d01.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/dark-mode@2x.3e150d01.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 70733
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-1144d"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 3386
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-d3a"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 8839
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-2287"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 7116
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-1bcc"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 2057
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-809"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/country.json
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /country.json HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: empty
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: application/json
                              vary: Accept-Encoding
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 22 Dec 2024 14:52:38 GMT
                              cache-control: max-age=86400
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/atb_home_impression?379630&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false&locale=en&origin=funnel_home
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/atb_home_impression?379630&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false&locale=en&origin=funnel_home HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:37 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/atb_home_download_impression?63473&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&locale=en&origin=funnel_home
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/atb_home_download_impression?63473&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&locale=en&origin=funnel_home HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:37 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 182030
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-2c70e"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 47334
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-b8e6"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 40423
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-9de7"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 64366
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-fb6e"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 3386
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-d3a"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 8839
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-2287"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 7116
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-1bcc"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 2057
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-809"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-front-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-front-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 92229
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-16845"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-back-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-back-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: image/png
                              content-length: 201629
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-3139d"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/_next/data/oD1VI4kCyPoypb_amISYf/about.json
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /_next/data/oD1VI4kCyPoypb_amISYf/about.json HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              purpose: prefetch
                              x-nextjs-data: 1
                              sec-fetch-dest: empty
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:38 GMT
                              content-type: text/html; charset=UTF-8
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              vary: Accept-Encoding
                              etag: W/"6765f125-10a7"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:38 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/app-protection-android-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/app-protection-android-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:39 GMT
                              content-type: image/png
                              content-length: 60280
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-eb78"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:39 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-back-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-back-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:39 GMT
                              content-type: image/png
                              content-length: 98937
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-18279"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:39 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-front-light.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-front-light.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:39 GMT
                              content-type: image/png
                              content-length: 34303
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-85ff"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:39 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/static-assets/favicons/DDG-iOS-icon_152x152.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /static-assets/favicons/DDG-iOS-icon_152x152.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:39 GMT
                              content-type: image/png
                              content-length: 3576
                              last-modified: Fri, 20 Dec 2024 22:35:17 GMT
                              etag: "6765f125-df8"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:39 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/favicon.ico
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /favicon.ico HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:39 GMT
                              content-type: image/x-icon
                              last-modified: Thu, 31 Oct 2024 23:45:30 GMT
                              vary: Accept-Encoding
                              etag: W/"6724169a-aef"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 22 Dec 2024 14:52:39 GMT
                              cache-control: max-age=86400
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/ac/?q=h&kl=wt-wt
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /ac/?q=h&kl=wt-wt HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: empty
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:39 GMT
                              content-type: application/javascript; charset=UTF-8
                              vary: Accept-Encoding
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sat, 21 Dec 2024 14:52:38 GMT
                              cache-control: no-cache
                              content-disposition: attachment; filename="ac.json"
                              x-duckduckgo-privacy-random-ac: qjksl7GboJlmAPwFPvGEx4Z8QVSKt0l5xCtdQPigM2IRhTQqRg8kAeaQfrMNxb4SlTIgcLFmm8j67vO5V7Br94Swcl2DryagLroBjTQ8DyQlh6pGzZMPRF5zO3Otq3A2wlV78lfbi1OD4XoMcq23ShRzr7ceBoGYDzInQGtDPq6JpcpdMnFq26NadjLG29dg1xLqYNL8mnPXo
                              content-encoding: br
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/page_home_searchbox_suggest?5411334&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/page_home_searchbox_suggest?5411334&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:39 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:38 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://duckduckgo.com/ac/?q=ha&kl=wt-wt
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /ac/?q=ha&kl=wt-wt HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: empty
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:39 GMT
                              content-type: application/javascript; charset=UTF-8
                              vary: Accept-Encoding
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sat, 21 Dec 2024 14:52:38 GMT
                              cache-control: no-cache
                              content-disposition: attachment; filename="ac.json"
                              x-duckduckgo-privacy-random-ac: NZa63jBdUXQvV5Lpb1kLZhEhmfTJiF3pxULMmtLpOfpfaM29s8Xt7HnKh8ldAW2KH5g50l4mRRsH6rjUOqTPeAHl89lRVVt3Vr1g02kqc9vhRDEIpsjFE6Z1zRKachHfrKCpzlV1xSEtDpMJemOxr7fS2gq1S1ERNtABoCuiT0mdigNdeiF2YrfPg8lMmfeUbJIGKfgEXOdlGIivSr4jpwNqa9RStBt2bb8Yo5OPCbdB7Etp7NZkR1zgjFPgBNdeJ5OUlek6MRc
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/ac/?q=has&kl=wt-wt
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /ac/?q=has&kl=wt-wt HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: empty
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:39 GMT
                              content-type: application/javascript; charset=UTF-8
                              vary: Accept-Encoding
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sat, 21 Dec 2024 14:52:38 GMT
                              cache-control: no-cache
                              content-disposition: attachment; filename="ac.json"
                              x-duckduckgo-privacy-random-ac: zTfN8vfY08auy8R5nGklhWQTVhmXkwM1wAmEv3fA4r91n6fFCWn5sdc5MApRFDNrZ8hlHh4zssOJGDVHU2xiD3xCkEsBUhMOglsSDV2PL7pPfdqricfG4WvpyXGPa8pLpr0dFnsnTziZBg9VkI6j5KHd5rbAJoiTGsHpZjlY38IKpodxNXXZiwAm0EzYxcJ1aZ9hHz9HjF3kE7AkWL0AxurVQZiVoSVqDz10azuw12J2xM1wR4c1Z1S0qeqaspH5fp95g5vBDFgH5cbvYKDh6mVwfxk8K3djC7EJ86DGQMJ9D9TBOPWpylzywgqbLafl4hXySkxikG5XNYBgWP956k4mp3j9h0ClTUL0mu1x7WvbvCLKYbhTtiELmURWIfMfS3cqdMBt41eFJQAtHPIi
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/ac/?q=hash&kl=wt-wt
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /ac/?q=hash&kl=wt-wt HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: empty
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:40 GMT
                              content-type: application/javascript; charset=UTF-8
                              vary: Accept-Encoding
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sat, 21 Dec 2024 14:52:39 GMT
                              cache-control: no-cache
                              content-disposition: attachment; filename="ac.json"
                              x-duckduckgo-privacy-random-ac: CU4r8Y3Skv2yzrf98amEo5e1c3x3rUlocOfa2vCtQgK99hGUF88ddfES1ZrglPjA9fqcP3K25hSq9rHlgdhnbgGcXwpAyOncd2XpciFDLkSchE70yFdyRudkZfmb6uJXW1AlIKKjX34xCb43HEPCXAWOI0T6MFcYUcGXBNjw22NPgiClkOHtIbORcV1u6xNwl6spuSndEkJjo6KhXHcMhIg5SAQn2lzVJGayqX6ZndQMa39O4XkbAUyAhpK8vngQ6V5lCBFvmt1vzMIkAA0o4S9elPnVaJMbfSHQibEIjN09gv4aSZxaCuEf7gdYo0IiTlnG0zL7lNcwQiqRAqf83ot0BHHOiYWaZYX
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/ac/?q=hasht&kl=wt-wt
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /ac/?q=hasht&kl=wt-wt HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: empty
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:40 GMT
                              content-type: application/javascript; charset=UTF-8
                              vary: Accept-Encoding
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sat, 21 Dec 2024 14:52:39 GMT
                              cache-control: no-cache
                              content-disposition: attachment; filename="ac.json"
                              x-duckduckgo-privacy-random-ac: 9s1ZTmtsu8VjcxfcqS6podH5wek1YYSOUrAk20Cbzb7p4caYVMfYUXMN68Bd346sV0g6CGV4hkthRKfakehcx7ZXetj7Zcdhg7V18h7VQIzzN80ZMR2Ib2gtX7FXHxbXZpbzW70WciKqJyYyCjGCMFLGyot0rfkZJBtl1XHf462djesJFvGix0wAJ62LgQBuW7d1zJWa7I2EQBkJaodldmFobGieNnJTywBRQuxV2JYSD0YGWrDvapdWbsDfufG5iGug3Jl639HmyBNnVh33UGXaLls797fOeOg9L5PY7HwTBlRCZ1r0eIAtFahGuJK8GxWM093Aelmh1o2A1lZ3HeYakOBY5ETGUsK1LcjXAXrgOyVyU9cIPgkpeccY8ieKbX4ogg4ImfZGgU4AZew0F1jn
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/ac/?q=hashta&kl=wt-wt
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /ac/?q=hashta&kl=wt-wt HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: empty
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:40 GMT
                              content-type: application/javascript; charset=UTF-8
                              vary: Accept-Encoding
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sat, 21 Dec 2024 14:52:39 GMT
                              cache-control: no-cache
                              content-disposition: attachment; filename="ac.json"
                              x-duckduckgo-privacy-random-ac: GImzlK7Ew2yVVmzn444syR3Yci3MuKpEy1qAU54gk590rrIxq1ParNFU0Ze6JBJcDF228C1yh0wB0nBouvPjkHKsKwjTyZXelJRot9uCvOApY33R7N0tTnwMUixID2AKgGbUQcK0zPU7Y70qwMy4C7vlTJkgWGK1uXEKWRlMqKthdZ0VjPK9ytyXj1K3lIhTv4IxGfQDKJDy5ovZBQN4CWzqDMHbycfijcdpwGQ1Ph7ebl2GAQZbjCI6pG4klmmUPJKPye4ZbVjBd8Zv8lhgsT6bAiiBZS7
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/ac/?q=hashtag&kl=wt-wt
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /ac/?q=hashtag&kl=wt-wt HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: empty
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:40 GMT
                              content-type: application/javascript; charset=UTF-8
                              vary: Accept-Encoding
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sat, 21 Dec 2024 14:52:39 GMT
                              cache-control: no-cache
                              content-disposition: attachment; filename="ac.json"
                              x-duckduckgo-privacy-random-ac: OQCoDyd72ajrX0Xf4eH5TprWKLJMOCxun19dV5DVXZ3WffuFdgIL6M2tzXfvdby4YSm9Aq8TOeSOkkswdC7Ot75mYxyqdZsrfkcCLjQe2PVvi9BEUYtTTXBV3gZtYMVkp2s7kMaC4c2wdXrP45PjTe4VCW19zxDYWsqtfsYdBUg7P35O6tVpo8n8eSRdJpUVSmcHaxbw88s6eHfVk631ibNyCekBnIUMiKegolGpCGLal9YBzgRHUdeTSmyb0hXgceuMPwqjdVv6t1Iepzmuyws77oSW0WJ
                              content-encoding: br
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/page_home_searchbox_submit?7641488&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/page_home_searchbox_submit?7641488&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:40 GMT
                              content-type: image/gif
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:40 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://duckduckgo.com/?t=h_&q=hashtag
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /?t=h_&q=hashtag HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              upgrade-insecure-requests: 1
                              sec-fetch-dest: document
                              sec-fetch-mode: navigate
                              sec-fetch-site: same-origin
                              sec-fetch-user: ?1
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:40 GMT
                              content-type: text/html; charset=UTF-8
                              vary: Accept-Encoding
                              server-timing: total;dur=54;desc="Backend Total [n]"
                              x-duckduckgo-results: 1
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sat, 21 Dec 2024 14:52:41 GMT
                              cache-control: max-age=1
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/s.54d8dbeb4d33865059b6.css
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/s.54d8dbeb4d33865059b6.css HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/css,*/*;q=0.1
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: style
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:40 GMT
                              content-type: text/css
                              content-length: 35240
                              last-modified: Wed, 18 Dec 2024 13:49:12 GMT
                              vary: Accept-Encoding
                              etag: "6762d2d8-89a8"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:40 GMT
                              cache-control: max-age=31536000
                              vary: Accept-Encoding
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/r.cb0b70e9c969a49a8655.css
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/r.cb0b70e9c969a49a8655.css HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/css,*/*;q=0.1
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: style
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:40 GMT
                              content-type: text/css
                              content-length: 60893
                              last-modified: Mon, 16 Dec 2024 22:56:19 GMT
                              vary: Accept-Encoding
                              etag: "6760b013-eddd"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:40 GMT
                              cache-control: max-age=31536000
                              vary: Accept-Encoding
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/wpl.main.61734e925b14fbd21f05.css
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/wpl.main.61734e925b14fbd21f05.css HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/css,*/*;q=0.1
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: style
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:40 GMT
                              content-type: text/css
                              content-length: 35759
                              last-modified: Fri, 20 Dec 2024 21:49:22 GMT
                              vary: Accept-Encoding
                              etag: "6765e662-8baf"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:40 GMT
                              cache-control: max-age=31536000
                              vary: Accept-Encoding
                            • flag-ie
                              GET
                              https://duckduckgo.com/font/ProximaNova-Reg-webfont.woff2
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /font/ProximaNova-Reg-webfont.woff2 HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: font
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:40 GMT
                              content-type: font/woff2
                              last-modified: Thu, 31 Oct 2024 23:45:30 GMT
                              vary: Accept-Encoding
                              etag: W/"6724169a-469c"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:40 GMT
                              cache-control: max-age=31536000
                              cache-control: public
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /font/ProximaNova-Sbold-webfont.woff2 HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: font
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/b.76f7b32785935b9052d8.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/b.76f7b32785935b9052d8.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/lib/l.32113981e35aa54fc221.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/lib/l.32113981e35aa54fc221.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/locale/en_US.08371c3326b19c07e64bca39bbdd38e5.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/locale/en_US.08371c3326b19c07e64bca39bbdd38e5.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/util/u.a94849abb631fa45ce7f.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/util/u.a94849abb631fa45ce7f.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/wpmv.76080f364d2af8dfd75f.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/wpmv.76080f364d2af8dfd75f.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/wpm.main.87246e50269b255c4907.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/wpm.main.87246e50269b255c4907.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/d.4fd7fada0d09b048b9a3.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/d.4fd7fada0d09b048b9a3.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/g.62d9645a1bff91d0117a.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/g.62d9645a1bff91d0117a.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                            • flag-us
                              DNS
                              duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              duckduckgo.com
                              IN A
                              Response
                              duckduckgo.com
                              IN A
                              52.142.124.215
                            • flag-us
                              DNS
                              duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              duckduckgo.com
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              duckduckgo.com
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              improving.duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              improving.duckduckgo.com
                              IN A
                              Response
                              improving.duckduckgo.com
                              IN CNAME
                              duckduckgo.com
                              duckduckgo.com
                              IN A
                              52.142.124.215
                            • flag-us
                              DNS
                              improving.duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              improving.duckduckgo.com
                              IN A
                              Response
                              improving.duckduckgo.com
                              IN CNAME
                              duckduckgo.com
                              duckduckgo.com
                              IN A
                              52.142.124.215
                            • flag-us
                              DNS
                              links.duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              links.duckduckgo.com
                              IN A
                              Response
                              links.duckduckgo.com
                              IN A
                              20.223.54.233
                            • flag-us
                              DNS
                              links.duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              links.duckduckgo.com
                              IN A
                              Response
                              links.duckduckgo.com
                              IN A
                              20.223.54.233
                            • flag-ie
                              GET
                              https://links.duckduckgo.com/d.js?q=hashtag&t=A&l=uk-en&s=0&a=h_&ct=GB&vqd=4-151242283305029547496619133909650327327&bing_market=en-GB&p_ent=&ex=-1&dp=Im1AUqql150CyiXf4StWvkYzDwSUljKMxQam45Svk0znhYUtgjHYB637nslfuuvI-iLWhUJI3hz2G4r9Eye1GQOPq6O0WvXR8QcpPCTSWTY.q32ldJvtALitSby-97iaEg&wpa=Hashtag&perf_id=ffe15d9f2825766d&parent_perf_id=978745ccc019525d&host_region=eun&sp=0&dfrsp=1&baa=1&bcca=1&bpa=1&btaa=1&wrap=1&aps=0&aboutmapsexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&eclsexp=a&litexp=a&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              20.223.54.233:443
                              Request
                              GET /d.js?q=hashtag&t=A&l=uk-en&s=0&a=h_&ct=GB&vqd=4-151242283305029547496619133909650327327&bing_market=en-GB&p_ent=&ex=-1&dp=Im1AUqql150CyiXf4StWvkYzDwSUljKMxQam45Svk0znhYUtgjHYB637nslfuuvI-iLWhUJI3hz2G4r9Eye1GQOPq6O0WvXR8QcpPCTSWTY.q32ldJvtALitSby-97iaEg&wpa=Hashtag&perf_id=ffe15d9f2825766d&parent_perf_id=978745ccc019525d&host_region=eun&sp=0&dfrsp=1&baa=1&bcca=1&bpa=1&btaa=1&wrap=1&aps=0&aboutmapsexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&eclsexp=a&litexp=a&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: links.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: application/x-javascript; charset=UTF-8
                              vary: Accept-Encoding
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              server-timing: total;dur=516;desc="Backend Total [n]"
                              strict-transport-security: max-age=31536000
                              x-robots-tag: noindex
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ; report-uri https://duckduckgo.com/csp_report_ed.js
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-us
                              DNS
                              links.duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              links.duckduckgo.com
                              IN A
                              Response
                              links.duckduckgo.com
                              IN A
                              20.223.54.233
                            • flag-us
                              DNS
                              links.duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              links.duckduckgo.com
                              IN A
                              Response
                              links.duckduckgo.com
                              IN A
                              20.223.54.233
                            • flag-us
                              DNS
                              links.duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              links.duckduckgo.com
                              IN AAAA
                              Response
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/locale/en_US.08371c3326b19c07e64bca39bbdd38e5.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/locale/en_US.08371c3326b19c07e64bca39bbdd38e5.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: application/x-javascript
                              content-length: 29292
                              last-modified: Thu, 28 Nov 2024 15:47:51 GMT
                              vary: Accept-Encoding
                              etag: "674890a7-726c"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              vary: Accept-Encoding
                            • flag-ie
                              GET
                              https://duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /font/ProximaNova-Sbold-webfont.woff2 HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: font
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: font/woff2
                              last-modified: Thu, 31 Oct 2024 00:22:30 GMT
                              vary: Accept-Encoding
                              etag: W/"6722cdc6-46ec"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              cache-control: public
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/wpmv.76080f364d2af8dfd75f.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/wpmv.76080f364d2af8dfd75f.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: application/x-javascript
                              content-length: 67751
                              last-modified: Mon, 04 Nov 2024 16:05:56 GMT
                              vary: Accept-Encoding
                              etag: "6728f0e4-108a7"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              vary: Accept-Encoding
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/b.76f7b32785935b9052d8.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/b.76f7b32785935b9052d8.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: application/x-javascript
                              content-length: 11227
                              last-modified: Fri, 20 Dec 2024 21:41:16 GMT
                              vary: Accept-Encoding
                              etag: "6765e47c-2bdb"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              vary: Accept-Encoding
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/wpm.main.87246e50269b255c4907.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/wpm.main.87246e50269b255c4907.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: application/x-javascript
                              content-length: 172199
                              last-modified: Fri, 20 Dec 2024 21:49:22 GMT
                              vary: Accept-Encoding
                              etag: "6765e662-2a0a7"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              vary: Accept-Encoding
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/lib/l.32113981e35aa54fc221.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/lib/l.32113981e35aa54fc221.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: application/x-javascript
                              content-length: 45797
                              last-modified: Tue, 06 Aug 2024 15:56:47 GMT
                              vary: Accept-Encoding
                              etag: "66b247bf-b2e5"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              vary: Accept-Encoding
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/util/u.a94849abb631fa45ce7f.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/util/u.a94849abb631fa45ce7f.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: application/x-javascript
                              content-length: 36802
                              last-modified: Fri, 20 Dec 2024 16:18:41 GMT
                              vary: Accept-Encoding
                              etag: "676598e1-8fc2"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              vary: Accept-Encoding
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/g.62d9645a1bff91d0117a.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/g.62d9645a1bff91d0117a.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: application/x-javascript
                              content-length: 217898
                              last-modified: Fri, 20 Dec 2024 19:29:23 GMT
                              vary: Accept-Encoding
                              etag: "6765c593-3532a"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              vary: Accept-Encoding
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/d.4fd7fada0d09b048b9a3.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/d.4fd7fada0d09b048b9a3.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: application/x-javascript
                              content-length: 90021
                              last-modified: Fri, 20 Dec 2024 18:45:00 GMT
                              vary: Accept-Encoding
                              etag: "6765bb2c-15fa5"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              vary: Accept-Encoding
                            • flag-ie
                              GET
                              https://duckduckgo.com/assets/logo_header.v109.svg
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /assets/logo_header.v109.svg HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/svg+xml
                              last-modified: Thu, 31 Oct 2024 00:22:29 GMT
                              vary: Accept-Encoding
                              etag: W/"6722cdc5-1174"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              cache-control: public
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/t.js?q=hashtag&t=A&l=uk-en&s=0&ct=GB&bing_market=en-GB&p_ent=&ex=-1&dp=Im1AUqql150CyiXf4StWvkYzDwSUljKMxQam45Svk0znhYUtgjHYB637nslfuuvI-iLWhUJI3hz2G4r9Eye1GQOPq6O0WvXR8QcpPCTSWTY.q32ldJvtALitSby-97iaEg&wpa=Hashtag&perf_id=ffe15d9f2825766d&parent_perf_id=978745ccc019525d&host_region=eun&dfrsp=1&baa=1&bcca=1&btaa=1&aps=0&aboutmapsexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&eclsexp=a&litexp=a&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /t.js?q=hashtag&t=A&l=uk-en&s=0&ct=GB&bing_market=en-GB&p_ent=&ex=-1&dp=Im1AUqql150CyiXf4StWvkYzDwSUljKMxQam45Svk0znhYUtgjHYB637nslfuuvI-iLWhUJI3hz2G4r9Eye1GQOPq6O0WvXR8QcpPCTSWTY.q32ldJvtALitSby-97iaEg&wpa=Hashtag&perf_id=ffe15d9f2825766d&parent_perf_id=978745ccc019525d&host_region=eun&dfrsp=1&baa=1&bcca=1&btaa=1&aps=0&aboutmapsexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&eclsexp=a&litexp=a&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: application/x-javascript
                              content-length: 0
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://duckduckgo.com/post3.html
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /post3.html HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              upgrade-insecure-requests: 1
                              sec-fetch-dest: iframe
                              sec-fetch-mode: navigate
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: text/html; charset=UTF-8
                              content-length: 136
                              vary: Accept-Encoding
                              etag: "6765f12e-88"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://search.duckduckgo.com ; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/s.bf8da8d2f90d4dcd31ba.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/s.bf8da8d2f90d4dcd31ba.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: application/x-javascript
                              content-length: 11991
                              last-modified: Tue, 24 Sep 2024 14:59:12 GMT
                              vary: Accept-Encoding
                              etag: "66f2d3c0-2ed7"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              vary: Accept-Encoding
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/react-assets/fe21b530ba74e4553643.svg
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/react-assets/fe21b530ba74e4553643.svg HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/svg+xml
                              last-modified: Thu, 16 May 2024 20:11:05 GMT
                              vary: Accept-Encoding
                              etag: W/"66466859-283"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              cache-control: public
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/react-assets/212874b7047e393bacb8.svg
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/react-assets/212874b7047e393bacb8.svg HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/svg+xml
                              last-modified: Thu, 16 May 2024 20:11:05 GMT
                              vary: Accept-Encoding
                              etag: W/"66466859-591"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              cache-control: public
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/react-assets/23d563f964108cbb5b74.svg
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/react-assets/23d563f964108cbb5b74.svg HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/svg+xml
                              last-modified: Thu, 16 May 2024 20:11:05 GMT
                              vary: Accept-Encoding
                              etag: W/"66466859-215"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              cache-control: public
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/assets/onboarding/data-for-sale@2x.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /assets/onboarding/data-for-sale@2x.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/png
                              content-length: 46602
                              last-modified: Thu, 31 Oct 2024 00:22:29 GMT
                              etag: "6722cdc5-b60a"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              cache-control: public
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/assets/install_arrow.svg
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /assets/install_arrow.svg HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/svg+xml
                              last-modified: Thu, 31 Oct 2024 00:22:29 GMT
                              vary: Accept-Encoding
                              etag: W/"6722cdc5-4ea"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              cache-control: public
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/assets/onboarding/atb-check.svg
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /assets/onboarding/atb-check.svg HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/svg+xml
                              last-modified: Thu, 31 Oct 2024 00:22:29 GMT
                              vary: Accept-Encoding
                              etag: W/"6722cdc5-193"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              cache-control: public
                              content-encoding: br
                            • flag-ie
                              GET
                              https://duckduckgo.com/dist/p.f5b58579149e7488209f.js
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /dist/p.f5b58579149e7488209f.js HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: script
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: application/x-javascript
                              content-length: 157
                              last-modified: Fri, 27 Oct 2023 12:03:07 GMT
                              vary: Accept-Encoding
                              etag: "653ba6fb-9d"
                              content-encoding: br
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              vary: Accept-Encoding
                            • flag-ie
                              GET
                              https://duckduckgo.com/assets/icons/meta/DDG-iOS-icon_152x152.png?v=2
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /assets/icons/meta/DDG-iOS-icon_152x152.png?v=2 HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/png
                              content-length: 3576
                              last-modified: Thu, 31 Oct 2024 00:22:29 GMT
                              etag: "6722cdc5-df8"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              cache-control: public
                              accept-ranges: bytes
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/serp_browser_support?9152291&csssupports=1&csscustomproperties=1&cssgrid=1&cssgridadvanced=1&jsmodules=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/serp_browser_support?9152291&csssupports=1&csscustomproperties=1&cssgrid=1&cssgridadvanced=1&jsmodules=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/atbsi_firefox_v461-4?2862572&l=en_US&p=windows&ax=false&pre_va=_&pre_atbva=_&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/atbsi_firefox_v461-4?2862572&l=en_US&p=windows&ax=false&pre_va=_&pre_atbva=_&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/si?3611500&b=firefox&atbi=true&i=false&d=d&l=en_US&p=windows&pre_atb=v461-4&ax=false&ak=false&serp_return=0&pre_va=_&pre_atbva=_&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/si?3611500&b=firefox&atbi=true&i=false&d=d&l=en_US&p=windows&pre_atb=v461-4&ax=false&ak=false&serp_return=0&pre_va=_&pre_atbva=_&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/apss_f?4333506&preloaded=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/apss_f?4333506&preloaded=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/l_d_re?335189&iao=1&rl=uk-en&dl=&ck=0&atbi=true&i=false&q=hashtag&ct=GB&kl=uk-en&kp=-1&serp_return=0&djsd=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/l_d_re?335189&iao=1&rl=uk-en&dl=&ck=0&atbi=true&i=false&q=hashtag&ct=GB&kl=uk-en&kp=-1&serp_return=0&djsd=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/ias_web?4044520&fromWebTab=1&initialState=active&timeSincePageLoad=140&timeSinceDeepStarted=8&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/ias_web?4044520&fromWebTab=1&initialState=active&timeSincePageLoad=140&timeSinceDeepStarted=8&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              server-timing: total;dur=0;desc="Backend Total [n]"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/ias_images?703954&fromWebTab=1&initialState=inactive&timeSincePageLoad=140&timeSinceDeepStarted=8&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/ias_images?703954&fromWebTab=1&initialState=inactive&timeSincePageLoad=140&timeSinceDeepStarted=8&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/ias_videos?6115492&fromWebTab=1&initialState=inactive&timeSincePageLoad=141&timeSinceDeepStarted=9&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/ias_videos?6115492&fromWebTab=1&initialState=inactive&timeSincePageLoad=141&timeSinceDeepStarted=9&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/ias_news?4463112&fromWebTab=1&initialState=inactive&timeSincePageLoad=141&timeSinceDeepStarted=9&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/ias_news?4463112&fromWebTab=1&initialState=inactive&timeSincePageLoad=141&timeSinceDeepStarted=9&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/ias_maps_expanded?8252694&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/ias_maps_expanded?8252694&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/ias_products?334100&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/ias_products?334100&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/ias_chat?3272444&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/ias_chat?3272444&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://duckduckgo.com/i/7cb3af6667f33259.jpg
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /i/7cb3af6667f33259.jpg HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/png
                              content-length: 320
                              last-modified: Thu, 31 Oct 2024 00:22:29 GMT
                              etag: "6722cdc5-140"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              cache-control: public
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/assets/icons/favicons/wikipedia.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /assets/icons/favicons/wikipedia.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/jpeg
                              content-length: 24758
                              x-amz-id-2: D+UCh6fbkN/nff9c6LNDJKSi3W5JYFP/7TbeUaS+NrK38l7XRX/sUX2pOYYp+UK44wv0p3+S/JY=
                              x-amz-request-id: C0TXACF29PQ693V4
                              last-modified: Fri, 09 Feb 2024 18:05:45 GMT
                              etag: "1222ed4dfea43fa50c971bc759b87fd6"
                              x-amz-server-side-encryption: AES256
                              cache-control: max-age=2592000
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Mon, 20 Jan 2025 14:52:41 GMT
                              accept-ranges: bytes
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://duckduckgo.com/assets/icons/favicons/youtube.png
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /assets/icons/favicons/youtube.png HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/png
                              content-length: 287
                              last-modified: Thu, 31 Oct 2024 00:22:29 GMT
                              etag: "6722cdc5-11f"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              cache-control: public
                              accept-ranges: bytes
                            • flag-ie
                              GET
                              https://duckduckgo.com/assets/icons/related/loupe-grey.svg
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /assets/icons/related/loupe-grey.svg HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/svg+xml
                              last-modified: Thu, 31 Oct 2024 00:22:29 GMT
                              vary: Accept-Encoding
                              etag: W/"6722cdc5-2f9"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              cache-control: public
                              content-encoding: br
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/ad_bingv7aa?6808854&n=1&rl=uk-en&sld=0&d=brand24.com&ds=brand24.com&debug=%5B%7B%22siteLinksLength%22%3A0%2C%22type%22%3A%22%22%7D%5D&q=hashtag&ct=GB&kl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&ad_unit_index=8&isig=about:m&click_source=ad&instant_answers_shown=about%2Cvideos%2Crelated_searches&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/ad_bingv7aa?6808854&n=1&rl=uk-en&sld=0&d=brand24.com&ds=brand24.com&debug=%5B%7B%22siteLinksLength%22%3A0%2C%22type%22%3A%22%22%7D%5D&q=hashtag&ct=GB&kl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&ad_unit_index=8&isig=about:m&click_source=ad&instant_answers_shown=about%2Cvideos%2Crelated_searches&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              server-timing: total;dur=0;desc="Backend Total [n]"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://duckduckgo.com/y.js?ifu=%7B3%7Dappid%3D055AAD1BA669BEB8B048128DC89A107C678B527B%26rguid%3D03ee7f5a6852419d91d3017c61b6a4b5&iurl=%7B2%7DIG%3D7333678FF73344319EE73F71200F96F1%26CID%3D2D6B855AE21D6B6836169006E3506AC9%26Type%3DEvent.CPT%26DATA%3D0&impr=1m%3A6
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              GET /y.js?ifu=%7B3%7Dappid%3D055AAD1BA669BEB8B048128DC89A107C678B527B%26rguid%3D03ee7f5a6852419d91d3017c61b6a4b5&iurl=%7B2%7DIG%3D7333678FF73344319EE73F71200F96F1%26CID%3D2D6B855AE21D6B6836169006E3506AC9%26Type%3DEvent.CPT%26DATA%3D0&impr=1m%3A6 HTTP/2.0
                              host: duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              x-requested-with: XMLHttpRequest
                              sec-fetch-dest: empty
                              sec-fetch-mode: cors
                              sec-fetch-site: same-origin
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/iaoi_wikipedia_fathead?7218733&id=about&fot=i&lot=i&dev=sidebar:relocated&fsig=m&ss=0&sp=0&im=1&ism=1&px=0&ul=0&wt=Hashtag&ibv=0&adc=1&default=1&area=mainline&wide=0&index=1&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/iaoi_wikipedia_fathead?7218733&id=about&fot=i&lot=i&dev=sidebar:relocated&fsig=m&ss=0&sp=0&im=1&ism=1&px=0&ul=0&wt=Hashtag&ibv=0&adc=1&default=1&area=mainline&wide=0&index=1&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/iaoi_videos?4365888&id=videos&fot=i&lot=i&dev=mainline:slotted&fsig=na&ss=0&sp=0&im=1&ism=0&px=0&ul=0&adc=1&default=1&area=mainline&wide=0&index=4&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/iaoi_videos?4365888&id=videos&fot=i&lot=i&dev=mainline:slotted&fsig=na&ss=0&sp=0&im=1&ism=0&px=0&ul=0&adc=1&default=1&area=mainline&wide=0&index=4&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/iaoi_related_searches?8732386&id=related_searches&fot=i&lot=i&dev=mainline:slotted&fsig=na&ss=0&sp=0&im=1&ism=0&px=0&ul=0&adc=1&default=1&area=mainline&wide=0&index=13&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/iaoi_related_searches?8732386&id=related_searches&fot=i&lot=i&dev=mainline:slotted&fsig=na&ss=0&sp=0&im=1&ism=0&px=0&ul=0&adc=1&default=1&area=mainline&wide=0&index=13&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/moreresults?950438&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/moreresults?950438&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/l2_d_re?3715292&osl=1&u=bingv7aa&rc=10&oll=en:10&q=hashtag&ct=GB&rl=uk-en&serp_return=0&organic_above_fold=0&bing_market=en-GB&has_rich_facts=false&djsd=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/l2_d_re?3715292&osl=1&u=bingv7aa&rc=10&oll=en:10&q=hashtag&ct=GB&rl=uk-en&serp_return=0&organic_above_fold=0&bing_market=en-GB&has_rich_facts=false&djsd=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/adsummary?3722905&page=1&mainline_ad=1&mainline_products=0&mainline_products_middle=0&mainline_autoads=0&mainline_toursactivities=0&mainline_creditcards=0&sidebar_ad=0&sidebar_products=0&sidebar_products_middle=0&sidebar_autoads=0&sidebar_toursactivities=0&sidebar_creditcards=0&sidebar_multimedia_ad=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/adsummary?3722905&page=1&mainline_ad=1&mainline_products=0&mainline_products_middle=0&mainline_autoads=0&mainline_toursactivities=0&mainline_creditcards=0&sidebar_ad=0&sidebar_products=0&sidebar_products_middle=0&sidebar_autoads=0&sidebar_toursactivities=0&sidebar_creditcards=0&sidebar_multimedia_ad=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/dev?3211213&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&nerrors=0&ntimeouts=0&nconflicts=0&nextras=0&nsuperseded=0&pole=na&wide=na&extras=na&mainline=a1about1w2v1w8r1&sidebar=na&nshifts=0&d=dictionary_definition%3Aother%3Amainline%3Adata%3A0%2Cvideos%3Amodule%3Amainline%3Aslotted%3A0%2Crelated_searches%3Amodule%3Amainline%3Aslotted%3A0%2Cabout%3Amodule%3Asidebar%3Arelocated%3A0&q=hashtag&serp_return=0&organic_above_fold=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/dev?3211213&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&nerrors=0&ntimeouts=0&nconflicts=0&nextras=0&nsuperseded=0&pole=na&wide=na&extras=na&mainline=a1about1w2v1w8r1&sidebar=na&nshifts=0&d=dictionary_definition%3Aother%3Amainline%3Adata%3A0%2Cvideos%3Amodule%3Amainline%3Aslotted%3A0%2Crelated_searches%3Amodule%3Amainline%3Aslotted%3A0%2Cabout%3Amodule%3Asidebar%3Arelocated%3A0&q=hashtag&serp_return=0&organic_above_fold=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/iaui?683383&missing=en_wikipedia_queries%2Cnlp_fathead%2Cnlp_wiki%2Cwikinlp%2Cdictionary_definition&shown=about%2Cvideos%2Crelated_searches&r1=en_wikipedia_queries,nlp_fathead,nlp_wiki,wikinlp&r2=wikinlp&r4=dictionary_definition&r6=dictionary_definition,wikinlp&r8=wikinlp&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/iaui?683383&missing=en_wikipedia_queries%2Cnlp_fathead%2Cnlp_wiki%2Cwikinlp%2Cdictionary_definition&shown=about%2Cvideos%2Crelated_searches&r1=en_wikipedia_queries,nlp_fathead,nlp_wiki,wikinlp&r2=wikinlp&r4=dictionary_definition&r6=dictionary_definition,wikinlp&r8=wikinlp&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: application/x-javascript; charset=UTF-8
                              vary: Accept-Encoding
                              expires: Sat, 21 Dec 2024 14:52:40 GMT
                              server-timing: total;dur=151;desc="Backend Total [n]"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              content-security-policy: default-src 'none' ; connect-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; manifest-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; media-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; script-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' 'unsafe-eval' ; font-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; img-src data: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; style-src https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com 'unsafe-inline' ; object-src 'none' ; worker-src blob: ; child-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-src blob: https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; form-action https://duckduckgo.com https://*.duckduckgo.com https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/ https://spreadprivacy.com ; frame-ancestors 'self' https://html.duckduckgo.com; base-uri 'self' ; block-all-mixed-content ;
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/im_s?7403124&bfcache=0&bounce=0&vertical=web&retry=0&page=1&layoutready=1&abaready=1&aba=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/im_s?7403124&bfcache=0&bounce=0&vertical=web&retry=0&page=1&layoutready=1&abaready=1&aba=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:42 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:41 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/webvitals?7053917&fromWebTab=1&TTFB=110.0000&FCP=692.0000&LCP=834.0000&has_performance=1&is_cached=0&navigation_type=navigate&has_back_data=1&is_loaded_from_bfcache=0&is_bounce_back=0&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/webvitals?7053917&fromWebTab=1&TTFB=110.0000&FCP=692.0000&LCP=834.0000&has_performance=1&is_cached=0&navigation_type=navigate&has_back_data=1&is_loaded_from_bfcache=0&is_bounce_back=0&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:56 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:55 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              POST
                              https://improving.duckduckgo.com/t/serp_hidden?2651758&fromWebTab=1&vistedAltTab=na&visitedAltTabInitiallyVisible=na&nTabsVisited=1&ddgTabs=web_0&nTabs=7&altTabVisitDuration=na&darkMode=false&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&nerrors=0&ntimeouts=0&nconflicts=0&nextras=0&nsuperseded=0&pole=na&wide=na&extras=na&mainline=a1about1w2v1w8r1&sidebar=na&nshifts=0&q=hashtag&ct=GB&rl=uk-en&duckassist=0&ads=1&organics=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              firefox.exe
                              Remote address:
                              52.142.124.215:443
                              Request
                              POST /t/serp_hidden?2651758&fromWebTab=1&vistedAltTab=na&visitedAltTabInitiallyVisible=na&nTabsVisited=1&ddgTabs=web_0&nTabs=7&altTabVisitDuration=na&darkMode=false&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&nerrors=0&ntimeouts=0&nconflicts=0&nextras=0&nsuperseded=0&pole=na&wide=na&extras=na&mainline=a1about1w2v1w8r1&sidebar=na&nshifts=0&q=hashtag&ct=GB&rl=uk-en&duckassist=0&ads=1&organics=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b HTTP/2.0
                              host: improving.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              origin: https://duckduckgo.com
                              sec-fetch-dest: empty
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              content-length: 0
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:56 GMT
                              content-type: image/gif
                              content-length: 43
                              last-modified: Mon, 28 Sep 1970 06:00:00 GMT
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/atb/
                              expires: Sat, 21 Dec 2024 14:52:55 GMT
                              cache-control: no-cache
                              x-duckduckgo-locale: en_US
                            • flag-us
                              DNS
                              233.54.223.20.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              233.54.223.20.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              external-content.duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              external-content.duckduckgo.com
                              IN A
                              Response
                              external-content.duckduckgo.com
                              IN A
                              52.142.125.222
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fwww.bing.com%2Fth%3Fpid%3DAdsPlus%26id%3DODLS.43603529-9bfa-422a-bee1-1dfb8baf1ad8%26w%3D32%26h%3D32&f=1
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /iu/?u=https%3A%2F%2Fwww.bing.com%2Fth%3Fpid%3DAdsPlus%26id%3DODLS.43603529-9bfa-422a-bee1-1dfb8baf1ad8%26w%3D32%26h%3D32&f=1 HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/x-icon
                              vary: Accept-Encoding
                              vary: Accept-Encoding
                              expires: Mon, 20 Jan 2025 14:52:41 GMT
                              cache-control: max-age=2592000
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse3.mm.bing.net%2Fth%3Fid%3DOVP.6lSWTHIpJqlPry2FuZ-mdAHgFo%26pid%3DApi%26h%3D120&f=1&ipt=5b1c61bd4969a4d9d6757be05c584edce04a60d5d99860ece2b2796b5192bc1b&ipo=videos
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /iu/?u=https%3A%2F%2Ftse3.mm.bing.net%2Fth%3Fid%3DOVP.6lSWTHIpJqlPry2FuZ-mdAHgFo%26pid%3DApi%26h%3D120&f=1&ipt=5b1c61bd4969a4d9d6757be05c584edce04a60d5d99860ece2b2796b5192bc1b&ipo=videos HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/x-icon
                              vary: Accept-Encoding
                              vary: Accept-Encoding
                              expires: Mon, 20 Jan 2025 14:52:41 GMT
                              cache-control: max-age=2592000
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.oVmL5RBb3tk-zb9fu6_SWAHgFo%26pid%3DApi%26h%3D120&f=1&ipt=59dfa7a2c5d0e43eb5d98167a444fabf01a88bf6f6cd6286e6a04fe8e8029d67&ipo=videos
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.oVmL5RBb3tk-zb9fu6_SWAHgFo%26pid%3DApi%26h%3D120&f=1&ipt=59dfa7a2c5d0e43eb5d98167a444fabf01a88bf6f6cd6286e6a04fe8e8029d67&ipo=videos HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/x-icon
                              vary: Accept-Encoding
                              vary: Accept-Encoding
                              expires: Mon, 20 Jan 2025 14:52:41 GMT
                              cache-control: max-age=2592000
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.-3bGaMXiHqeXdCXO4JJqVgEkII%26pid%3DApi%26h%3D120&f=1&ipt=d3943bfbfab4bcc5042bc2e7cd2357d330af3c990955b6b255a49ac2a420e1b3&ipo=videos
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.-3bGaMXiHqeXdCXO4JJqVgEkII%26pid%3DApi%26h%3D120&f=1&ipt=d3943bfbfab4bcc5042bc2e7cd2357d330af3c990955b6b255a49ac2a420e1b3&ipo=videos HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/x-icon
                              vary: Accept-Encoding
                              vary: Accept-Encoding
                              expires: Mon, 20 Jan 2025 14:52:41 GMT
                              cache-control: max-age=2592000
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/ip3/www.tiktok.com.ico
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /ip3/www.tiktok.com.ico HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 404
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/png
                              content-length: 1478
                              etag: "673f4227-5c6"
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse2.mm.bing.net%2Fth%3Fid%3DOVP.fmFB0flDQgaeP_XJEUFIXQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=8af6dd4ae6faac70e73918a7112bd5b9068646eb8380b45425050ee8d0c4d2af&ipo=videos
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /iu/?u=https%3A%2F%2Ftse2.mm.bing.net%2Fth%3Fid%3DOVP.fmFB0flDQgaeP_XJEUFIXQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=8af6dd4ae6faac70e73918a7112bd5b9068646eb8380b45425050ee8d0c4d2af&ipo=videos HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/png
                              content-length: 1935
                              content-disposition: inline; filename="th-3790160371"; filename*=UTF-8''th-3790160371
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/ip3/www.merriam-webster.com.ico
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /ip3/www.merriam-webster.com.ico HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/jpeg
                              content-disposition: inline; filename="th-23195324"; filename*=UTF-8''th-23195324
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/ip3/www.wix.com.ico
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /ip3/www.wix.com.ico HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/jpeg
                              content-disposition: inline; filename="th-2134012118"; filename*=UTF-8''th-2134012118
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/ip3/kaydee.net.ico
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /ip3/kaydee.net.ico HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/x-icon
                              vary: Accept-Encoding
                              vary: Accept-Encoding
                              expires: Mon, 20 Jan 2025 14:52:41 GMT
                              cache-control: max-age=2592000
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse3.mm.bing.net%2Fth%3Fid%3DOVP.cBEW4e8NrYwZUF2uITDATQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=35c71e22b0dc653e41ed826613c9173b502bed55d043d1f83efed88e4225c5b6&ipo=videos
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /iu/?u=https%3A%2F%2Ftse3.mm.bing.net%2Fth%3Fid%3DOVP.cBEW4e8NrYwZUF2uITDATQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=35c71e22b0dc653e41ed826613c9173b502bed55d043d1f83efed88e4225c5b6&ipo=videos HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/jpeg
                              content-disposition: inline; filename="th-2286227587"; filename*=UTF-8''th-2286227587
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.zEGBH_hDdxJ_KKnZ7wwdCQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=fd6c7d3b328fbd199e8dded8ef4cfa383377c7a5406d63defdd37e4c9469cb6f&ipo=videos
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.zEGBH_hDdxJ_KKnZ7wwdCQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=fd6c7d3b328fbd199e8dded8ef4cfa383377c7a5406d63defdd37e4c9469cb6f&ipo=videos HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/x-icon
                              vary: Accept-Encoding
                              vary: Accept-Encoding
                              expires: Mon, 20 Jan 2025 14:52:41 GMT
                              cache-control: max-age=2592000
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.i9CTD0EqpE7NyNKOSfcinQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=2c55c7b7c44ef2f0d803a77d4415bfc9ba2ad4fdd33194ad941cee9100c9b461&ipo=videos
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.i9CTD0EqpE7NyNKOSfcinQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=2c55c7b7c44ef2f0d803a77d4415bfc9ba2ad4fdd33194ad941cee9100c9b461&ipo=videos HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/x-icon
                              vary: Accept-Encoding
                              vary: Accept-Encoding
                              expires: Mon, 20 Jan 2025 14:52:41 GMT
                              cache-control: max-age=2592000
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.QfNbDvfDIW3R4gHclrMc6wHgFo%26pid%3DApi%26h%3D120&f=1&ipt=4bf2c823d82051c995a30b3703059f969eb7de0c179352d2c9225086c7d7918e&ipo=videos
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.QfNbDvfDIW3R4gHclrMc6wHgFo%26pid%3DApi%26h%3D120&f=1&ipt=4bf2c823d82051c995a30b3703059f969eb7de0c179352d2c9225086c7d7918e&ipo=videos HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/jpeg
                              content-disposition: inline; filename="th-2902188370"; filename*=UTF-8''th-2902188370
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse2.mm.bing.net%2Fth%3Fid%3DOVP.CP1DuyiNb0BJ-Cy5rqq_8AHgFo%26pid%3DApi%26h%3D120&f=1&ipt=742987b8f11c36311794f4c14d6989af638785f094d8911679f99380b6534a93&ipo=videos
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /iu/?u=https%3A%2F%2Ftse2.mm.bing.net%2Fth%3Fid%3DOVP.CP1DuyiNb0BJ-Cy5rqq_8AHgFo%26pid%3DApi%26h%3D120&f=1&ipt=742987b8f11c36311794f4c14d6989af638785f094d8911679f99380b6534a93&ipo=videos HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/jpeg
                              content-disposition: inline; filename="th-2137558134"; filename*=UTF-8''th-2137558134
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.bpwSf5b3PfM1JLjUp49P9wHgFo%26pid%3DApi%26h%3D120&f=1&ipt=efa9cedca54bc1d303aa66932b16a1e95e9da644168eb1449acecaa07958254a&ipo=videos
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.bpwSf5b3PfM1JLjUp49P9wHgFo%26pid%3DApi%26h%3D120&f=1&ipt=efa9cedca54bc1d303aa66932b16a1e95e9da644168eb1449acecaa07958254a&ipo=videos HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/jpeg
                              content-disposition: inline; filename="th-2827203979"; filename*=UTF-8''th-2827203979
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/ip3/www.britannica.com.ico
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /ip3/www.britannica.com.ico HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/jpeg
                              content-disposition: inline; filename="th-73648526"; filename*=UTF-8''th-73648526
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/ip3/www.hashtags.org.ico
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /ip3/www.hashtags.org.ico HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/jpeg
                              content-disposition: inline; filename="th-3814497973"; filename*=UTF-8''th-3814497973
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/ip3/blog.hootsuite.com.ico
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /ip3/blog.hootsuite.com.ico HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/jpeg
                              content-disposition: inline; filename="th-3204663147"; filename*=UTF-8''th-3204663147
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/ip3/www.socialpilot.co.ico
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /ip3/www.socialpilot.co.ico HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/jpeg
                              content-disposition: inline; filename="th-951213016"; filename*=UTF-8''th-951213016
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              expires: Sun, 21 Dec 2025 14:52:41 GMT
                              cache-control: max-age=31536000
                              x-duckduckgo-locale: en_US
                            • flag-ie
                              GET
                              https://external-content.duckduckgo.com/ip3/dictionary.cambridge.org.ico
                              firefox.exe
                              Remote address:
                              52.142.125.222:443
                              Request
                              GET /ip3/dictionary.cambridge.org.ico HTTP/2.0
                              host: external-content.duckduckgo.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: image/avif,image/webp,*/*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              referer: https://duckduckgo.com/
                              sec-fetch-dest: image
                              sec-fetch-mode: no-cors
                              sec-fetch-site: same-site
                              te: trailers
                              Response
                              HTTP/2.0 200
                              server: nginx
                              date: Sat, 21 Dec 2024 14:52:41 GMT
                              content-type: image/x-icon
                              vary: Accept-Encoding
                              vary: Accept-Encoding
                              expires: Mon, 20 Jan 2025 14:52:41 GMT
                              cache-control: max-age=2592000
                              strict-transport-security: max-age=31536000
                              permissions-policy: interest-cohort=()
                              x-frame-options: SAMEORIGIN
                              x-xss-protection: 1;mode=block
                              x-content-type-options: nosniff
                              referrer-policy: origin
                              expect-ct: max-age=0
                              x-duckduckgo-moreinfo: See https://duckduckgo.com/duckduckgo-help-pages/privacy/favicons/
                              x-duckduckgo-locale: en_US
                              content-encoding: br
                            • flag-us
                              DNS
                              external-content.duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              external-content.duckduckgo.com
                              IN A
                              Response
                              external-content.duckduckgo.com
                              IN A
                              52.142.125.222
                            • flag-us
                              DNS
                              external-content.duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              external-content.duckduckgo.com
                              IN A
                              Response
                              external-content.duckduckgo.com
                              IN A
                              52.142.125.222
                            • flag-us
                              DNS
                              external-content.duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              external-content.duckduckgo.com
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              222.125.142.52.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              222.125.142.52.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              location.services.mozilla.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              location.services.mozilla.com
                              IN A
                              Response
                              location.services.mozilla.com
                              IN CNAME
                              prod.classify-client.prod.webservices.mozgcp.net
                              prod.classify-client.prod.webservices.mozgcp.net
                              IN A
                              35.190.72.216
                            • flag-us
                              DNS
                              prod.balrog.prod.cloudops.mozgcp.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              prod.balrog.prod.cloudops.mozgcp.net
                              IN A
                              Response
                              prod.balrog.prod.cloudops.mozgcp.net
                              IN A
                              35.244.181.201
                            • flag-us
                              DNS
                              prod.classify-client.prod.webservices.mozgcp.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              prod.classify-client.prod.webservices.mozgcp.net
                              IN A
                              Response
                              prod.classify-client.prod.webservices.mozgcp.net
                              IN A
                              35.190.72.216
                            • flag-us
                              DNS
                              prod.classify-client.prod.webservices.mozgcp.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              prod.classify-client.prod.webservices.mozgcp.net
                              IN A
                              Response
                              prod.classify-client.prod.webservices.mozgcp.net
                              IN A
                              35.190.72.216
                            • flag-us
                              DNS
                              prod.balrog.prod.cloudops.mozgcp.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              prod.balrog.prod.cloudops.mozgcp.net
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              prod.balrog.prod.cloudops.mozgcp.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              prod.balrog.prod.cloudops.mozgcp.net
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              prod.classify-client.prod.webservices.mozgcp.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              prod.classify-client.prod.webservices.mozgcp.net
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              redirector.gvt1.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              redirector.gvt1.com
                              IN A
                              Response
                              redirector.gvt1.com
                              IN A
                              172.217.20.174
                            • flag-us
                              DNS
                              redirector.gvt1.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              redirector.gvt1.com
                              IN A
                              Response
                              redirector.gvt1.com
                              IN A
                              172.217.20.174
                            • flag-us
                              DNS
                              ciscobinary.openh264.org
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              ciscobinary.openh264.org
                              IN A
                              Response
                              ciscobinary.openh264.org
                              IN CNAME
                              a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com
                              a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com
                              IN CNAME
                              a17.rackcdn.com
                              a17.rackcdn.com
                              IN CNAME
                              a17.rackcdn.com.mdc.edgesuite.net
                              a17.rackcdn.com.mdc.edgesuite.net
                              IN CNAME
                              a19.dscg10.akamai.net
                              a19.dscg10.akamai.net
                              IN A
                              88.221.134.209
                              a19.dscg10.akamai.net
                              IN A
                              88.221.134.155
                            • flag-us
                              DNS
                              ciscobinary.openh264.org
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              ciscobinary.openh264.org
                              IN A
                              Response
                              ciscobinary.openh264.org
                              IN CNAME
                              a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com
                              a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com
                              IN CNAME
                              a17.rackcdn.com
                              a17.rackcdn.com
                              IN CNAME
                              a17.rackcdn.com.mdc.edgesuite.net
                              a17.rackcdn.com.mdc.edgesuite.net
                              IN CNAME
                              a19.dscg10.akamai.net
                              a19.dscg10.akamai.net
                              IN A
                              88.221.134.209
                              a19.dscg10.akamai.net
                              IN A
                              88.221.134.155
                            • flag-fr
                              GET
                              https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x64.zip
                              firefox.exe
                              Remote address:
                              172.217.20.174:443
                              Request
                              GET /edgedl/widevine-cdm/4.10.2710.0-win-x64.zip HTTP/2.0
                              host: redirector.gvt1.com
                              user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              accept: */*
                              accept-language: en-US,en;q=0.5
                              accept-encoding: gzip, deflate, br
                              te: trailers
                            • flag-us
                              DNS
                              redirector.gvt1.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              redirector.gvt1.com
                              IN A
                              Response
                              redirector.gvt1.com
                              IN A
                              172.217.20.174
                            • flag-us
                              DNS
                              redirector.gvt1.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              redirector.gvt1.com
                              IN A
                              Response
                              redirector.gvt1.com
                              IN A
                              172.217.20.174
                            • flag-gb
                              GET
                              http://ciscobinary.openh264.org/openh264-win64-31c4d2e4a037526fd30d4e5c39f60885986cf865.zip
                              firefox.exe
                              Remote address:
                              88.221.134.209:80
                              Request
                              GET /openh264-win64-31c4d2e4a037526fd30d4e5c39f60885986cf865.zip HTTP/1.1
                              Host: ciscobinary.openh264.org
                              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              Accept: */*
                              Accept-Language: en-US,en;q=0.5
                              Accept-Encoding: gzip, deflate
                              Connection: keep-alive
                              Response
                              HTTP/1.1 200 OK
                              Last-Modified: Fri, 08 Nov 2024 02:37:54 GMT
                              ETag: 09372174e83dbbf696ee732fd2e875bb
                              Content-Length: 491284
                              Accept-Ranges: bytes
                              X-Timestamp: 1731033473.13891
                              Content-Type: application/zip
                              X-Trans-Id: txe2d6fd5524464f55a6fac-00673047f0dfw1
                              Cache-Control: public, max-age=235946
                              Expires: Tue, 24 Dec 2024 08:25:15 GMT
                              Date: Sat, 21 Dec 2024 14:52:49 GMT
                              Connection: keep-alive
                            • flag-us
                              DNS
                              a19.dscg10.akamai.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              a19.dscg10.akamai.net
                              IN A
                              Response
                              a19.dscg10.akamai.net
                              IN A
                              88.221.134.209
                              a19.dscg10.akamai.net
                              IN A
                              88.221.134.155
                            • flag-us
                              DNS
                              a19.dscg10.akamai.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              a19.dscg10.akamai.net
                              IN A
                              Response
                              a19.dscg10.akamai.net
                              IN A
                              88.221.134.155
                              a19.dscg10.akamai.net
                              IN A
                              88.221.134.209
                            • flag-us
                              DNS
                              redirector.gvt1.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              redirector.gvt1.com
                              IN AAAA
                              Response
                              redirector.gvt1.com
                              IN AAAA
                              2a00:1450:4007:80c::200e
                            • flag-us
                              DNS
                              redirector.gvt1.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              redirector.gvt1.com
                              IN AAAA
                              Response
                              redirector.gvt1.com
                              IN AAAA
                              2a00:1450:4007:80c::200e
                            • flag-us
                              DNS
                              a19.dscg10.akamai.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              a19.dscg10.akamai.net
                              IN AAAA
                              Response
                              a19.dscg10.akamai.net
                              IN AAAA
                              2a02:26f0:a1::58dd:86d1
                              a19.dscg10.akamai.net
                              IN AAAA
                              2a02:26f0:a1::58dd:869b
                            • flag-us
                              DNS
                              a19.dscg10.akamai.net
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              a19.dscg10.akamai.net
                              IN AAAA
                              Response
                              a19.dscg10.akamai.net
                              IN AAAA
                              2a02:26f0:a1::58dd:869b
                              a19.dscg10.akamai.net
                              IN AAAA
                              2a02:26f0:a1::58dd:86d1
                            • flag-us
                              DNS
                              r4---sn-aigzrnsz.gvt1.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              r4---sn-aigzrnsz.gvt1.com
                              IN A
                              Response
                              r4---sn-aigzrnsz.gvt1.com
                              IN CNAME
                              r4.sn-aigzrnsz.gvt1.com
                              r4.sn-aigzrnsz.gvt1.com
                              IN A
                              74.125.175.169
                            • flag-us
                              DNS
                              r4---sn-aigzrnsz.gvt1.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              r4---sn-aigzrnsz.gvt1.com
                              IN A
                              Response
                              r4---sn-aigzrnsz.gvt1.com
                              IN CNAME
                              r4.sn-aigzrnsz.gvt1.com
                              r4.sn-aigzrnsz.gvt1.com
                              IN A
                              74.125.175.169
                            • flag-gb
                              GET
                              https://r4---sn-aigzrnsz.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x64.zip?cms_redirect=yes&met=1734792769,&mh=R8&mip=181.215.176.83&mm=28&mn=sn-aigzrnsz&ms=nvh&mt=1734792259&mv=m&mvi=4&pl=27&rmhost=r1---sn-aigzrnsz.gvt1.com&rms=nvh,nvh&shardbypass=sd&smhost=r2---sn-aigzrn7s.gvt1.com
                              firefox.exe
                              Remote address:
                              74.125.175.169:443
                              Request
                              GET /edgedl/widevine-cdm/4.10.2710.0-win-x64.zip?cms_redirect=yes&met=1734792769,&mh=R8&mip=181.215.176.83&mm=28&mn=sn-aigzrnsz&ms=nvh&mt=1734792259&mv=m&mvi=4&pl=27&rmhost=r1---sn-aigzrnsz.gvt1.com&rms=nvh,nvh&shardbypass=sd&smhost=r2---sn-aigzrn7s.gvt1.com HTTP/1.1
                              Host: r4---sn-aigzrnsz.gvt1.com
                              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              Accept: */*
                              Accept-Language: en-US,en;q=0.5
                              Accept-Encoding: gzip, deflate, br
                              Connection: keep-alive
                              Response
                              HTTP/1.1 200 OK
                              Accept-Ranges: bytes
                              Cache-Control: public,max-age=86400
                              Content-Disposition: attachment
                              Content-Length: 14485862
                              Content-Security-Policy: default-src 'none'
                              Content-Type: application/zip
                              Etag: "1d3918c"
                              Server: downloads
                              X-Content-Type-Options: nosniff
                              X-Frame-Options: SAMEORIGIN
                              X-Xss-Protection: 0
                              Date: Sat, 21 Dec 2024 11:59:27 GMT
                              Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                              Last-Modified: Thu, 05 Oct 2023 00:56:47 GMT
                              Connection: keep-alive
                              Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46"
                              Vary: Origin
                            • flag-us
                              DNS
                              r4.sn-aigzrnsz.gvt1.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              r4.sn-aigzrnsz.gvt1.com
                              IN A
                              Response
                              r4.sn-aigzrnsz.gvt1.com
                              IN A
                              74.125.175.169
                            • flag-us
                              DNS
                              r4.sn-aigzrnsz.gvt1.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              r4.sn-aigzrnsz.gvt1.com
                              IN A
                              Response
                              r4.sn-aigzrnsz.gvt1.com
                              IN A
                              74.125.175.169
                            • flag-us
                              DNS
                              r4.sn-aigzrnsz.gvt1.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              r4.sn-aigzrnsz.gvt1.com
                              IN AAAA
                              Response
                              r4.sn-aigzrnsz.gvt1.com
                              IN AAAA
                              2a00:1450:4009:1b::9
                            • flag-us
                              DNS
                              r4.sn-aigzrnsz.gvt1.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              r4.sn-aigzrnsz.gvt1.com
                              IN AAAA
                              Response
                              r4.sn-aigzrnsz.gvt1.com
                              IN AAAA
                              2a00:1450:4009:1b::9
                            • flag-us
                              DNS
                              216.72.190.35.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              216.72.190.35.in-addr.arpa
                              IN PTR
                              Response
                              216.72.190.35.in-addr.arpa
                              IN PTR
                              2167219035bcgoogleusercontentcom
                            • flag-us
                              DNS
                              216.72.190.35.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              216.72.190.35.in-addr.arpa
                              IN PTR
                              Response
                              216.72.190.35.in-addr.arpa
                              IN PTR
                              2167219035bcgoogleusercontentcom
                            • flag-us
                              DNS
                              209.134.221.88.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              209.134.221.88.in-addr.arpa
                              IN PTR
                              Response
                              209.134.221.88.in-addr.arpa
                              IN PTR
                              a88-221-134-209deploystaticakamaitechnologiescom
                            • flag-us
                              DNS
                              209.134.221.88.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              209.134.221.88.in-addr.arpa
                              IN PTR
                            • flag-us
                              DNS
                              174.20.217.172.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              174.20.217.172.in-addr.arpa
                              IN PTR
                              Response
                              174.20.217.172.in-addr.arpa
                              IN PTR
                              waw02s07-in-f141e100net
                              174.20.217.172.in-addr.arpa
                              IN PTR
                              par10s49-in-f14�I
                              174.20.217.172.in-addr.arpa
                              IN PTR
                              waw02s07-in-f174�I
                            • flag-us
                              DNS
                              174.20.217.172.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              174.20.217.172.in-addr.arpa
                              IN PTR
                            • flag-us
                              DNS
                              169.175.125.74.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              169.175.125.74.in-addr.arpa
                              IN PTR
                              Response
                              169.175.125.74.in-addr.arpa
                              IN PTR
                              lhr48s34-in-f91e100net
                            • flag-us
                              DNS
                              169.175.125.74.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              169.175.125.74.in-addr.arpa
                              IN PTR
                            • flag-us
                              DNS
                              169.175.125.74.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              169.175.125.74.in-addr.arpa
                              IN PTR
                            • flag-us
                              DNS
                              201.181.244.35.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              201.181.244.35.in-addr.arpa
                              IN PTR
                              Response
                              201.181.244.35.in-addr.arpa
                              IN PTR
                              20118124435bcgoogleusercontentcom
                            • flag-us
                              DNS
                              201.181.244.35.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              201.181.244.35.in-addr.arpa
                              IN PTR
                            • flag-us
                              DNS
                              duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              duckduckgo.com
                              IN A
                              Response
                              duckduckgo.com
                              IN A
                              52.142.124.215
                            • flag-us
                              DNS
                              duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              duckduckgo.com
                              IN A
                              Response
                              duckduckgo.com
                              IN A
                              52.142.124.215
                            • flag-us
                              DNS
                              duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              duckduckgo.com
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              duckduckgo.com
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              168.253.116.51.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              168.253.116.51.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              gofile.io
                              IN A
                              Response
                              gofile.io
                              IN A
                              45.112.123.126
                            • flag-us
                              DNS
                              gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              gofile.io
                              IN A
                              Response
                              gofile.io
                              IN A
                              45.112.123.126
                            • flag-fr
                              GET
                              http://gofile.io/
                              Remote address:
                              45.112.123.126:80
                              Request
                              GET / HTTP/1.1
                              Host: gofile.io
                              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
                              Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
                              Accept-Language: en-US,en;q=0.5
                              Accept-Encoding: gzip, deflate
                              Connection: keep-alive
                              Upgrade-Insecure-Requests: 1
                              Response
                              HTTP/1.1 301 Moved Permanently
                              Server: nginx/1.27.1
                              Date: Sat, 21 Dec 2024 14:54:32 GMT
                              Content-Type: text/html
                              Content-Length: 169
                              Connection: keep-alive
                              Location: https://gofile.io/
                            • flag-us
                              DNS
                              gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              gofile.io
                              IN A
                              Response
                              gofile.io
                              IN A
                              45.112.123.126
                            • flag-us
                              DNS
                              gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              gofile.io
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              126.123.112.45.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              126.123.112.45.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              s.gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              s.gofile.io
                              IN A
                              Response
                              s.gofile.io
                              IN A
                              51.75.242.210
                            • flag-us
                              DNS
                              s.gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              s.gofile.io
                              IN A
                              Response
                              s.gofile.io
                              IN A
                              51.75.242.210
                            • flag-us
                              DNS
                              s.gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              s.gofile.io
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              api.gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              api.gofile.io
                              IN A
                              Response
                              api.gofile.io
                              IN A
                              45.112.123.126
                            • flag-us
                              DNS
                              api.gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              api.gofile.io
                              IN A
                              Response
                              api.gofile.io
                              IN A
                              45.112.123.126
                            • flag-us
                              DNS
                              api.gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              api.gofile.io
                              IN A
                              Response
                              api.gofile.io
                              IN A
                              45.112.123.126
                            • flag-us
                              DNS
                              api.gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              api.gofile.io
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              210.242.75.51.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              210.242.75.51.in-addr.arpa
                              IN PTR
                              Response
                              210.242.75.51.in-addr.arpa
                              IN PTR
                              mailgofileio
                            • flag-us
                              DNS
                              duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              duckduckgo.com
                              IN A
                              Response
                              duckduckgo.com
                              IN A
                              52.142.124.215
                            • flag-us
                              DNS
                              duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              duckduckgo.com
                              IN A
                              Response
                              duckduckgo.com
                              IN A
                              52.142.124.215
                            • flag-us
                              DNS
                              duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              duckduckgo.com
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              duckduckgo.com
                              firefox.exe
                              Remote address:
                              8.8.8.8:53
                              Request
                              duckduckgo.com
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              s.gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              s.gofile.io
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              store3.gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              store3.gofile.io
                              IN A
                              Response
                              store3.gofile.io
                              IN A
                              94.139.32.11
                            • flag-us
                              DNS
                              store3.gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              store3.gofile.io
                              IN A
                              Response
                              store3.gofile.io
                              IN A
                              94.139.32.11
                            • flag-us
                              DNS
                              store3.gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              store3.gofile.io
                              IN A
                              Response
                              store3.gofile.io
                              IN A
                              94.139.32.11
                            • flag-us
                              DNS
                              store3.gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              store3.gofile.io
                              IN A
                              Response
                              store3.gofile.io
                              IN A
                              94.139.32.11
                            • flag-us
                              DNS
                              store3.gofile.io
                              Remote address:
                              8.8.8.8:53
                              Request
                              store3.gofile.io
                              IN AAAA
                              Response
                            • flag-us
                              DNS
                              11.32.139.94.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              11.32.139.94.in-addr.arpa
                              IN PTR
                              Response
                            • flag-us
                              DNS
                              11.32.139.94.in-addr.arpa
                              Remote address:
                              8.8.8.8:53
                              Request
                              11.32.139.94.in-addr.arpa
                              IN PTR
                              Response
                            • 172.165.61.93:443
                              https://checkappexec.microsoft.com/windows/shell/actions
                              tls, http2
                              3.0kB
                              9.8kB
                              23
                              20

                              HTTP Request

                              POST https://checkappexec.microsoft.com/windows/shell/actions

                              HTTP Response

                              200
                            • 151.101.3.19:443
                              https://www.mozilla.org/media/img/favicons/firefox/browser/favicon.f093404c0135.ico
                              tls, http2
                              firefox.exe
                              10.2kB
                              621.8kB
                              115
                              506

                              HTTP Request

                              GET https://www.mozilla.org/firefox/welcome/21/

                              HTTP Response

                              302

                              HTTP Request

                              GET https://www.mozilla.org/en-US/firefox/welcome/21/

                              HTTP Response

                              200

                              HTTP Request

                              GET https://www.mozilla.org/media/js/site.b49d941e3374.js

                              HTTP Request

                              GET https://www.mozilla.org/media/css/m24-root.77a146bcaf17.css

                              HTTP Request

                              GET https://www.mozilla.org/media/css/m24-navigation-and-footer.bbc50722799f.css

                              HTTP Request

                              GET https://www.mozilla.org/media/css/protocol-firefox.8fb2966e28e1.css

                              HTTP Request

                              GET https://www.mozilla.org/media/css/protocol-picto.cfee40a3cd36.css

                              HTTP Request

                              GET https://www.mozilla.org/media/css/firefox_welcome_page19_to_24.3bad9ee2f487.css

                              HTTP Request

                              GET https://www.mozilla.org/media/js/gtm-snippet.b5b7c885f8fa.js

                              HTTP Request

                              GET https://www.mozilla.org/media/img/logos/firefox/logo-word-hor.f3b18871b657.svg

                              HTTP Request

                              GET https://www.mozilla.org/media/js/sentry.1fd5e9589639.js

                              HTTP Request

                              GET https://www.mozilla.org/media/js/lib.7cb1e204ce21.js

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://www.mozilla.org/media/js/fxa.6cacc544775b.js

                              HTTP Request

                              GET https://www.mozilla.org/media/js/data.438fd3539700.js

                              HTTP Request

                              GET https://www.mozilla.org/media/js/m24-ui.daf79f0fefd7.js

                              HTTP Request

                              GET https://www.mozilla.org/media/js/glean.f0ce2425d2c8.js

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://www.mozilla.org/media/js/firefox_welcome_page19_to_24.87e13c35e608.js

                              HTTP Request

                              GET https://www.mozilla.org/media/js/consent-banner.f74bb4c07d16.js

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://www.mozilla.org/media/protocol/fonts/Inter-Bold.0564381b22b2.woff2

                              HTTP Response

                              200

                              HTTP Request

                              GET https://www.mozilla.org/media/protocol/img/icons/social/x/white.7f50edd82090.svg

                              HTTP Request

                              GET https://www.mozilla.org/media/protocol/img/icons/social/instagram/white.a7014a6150b3.svg

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://www.mozilla.org/media/protocol/img/icons/social/linkedin/white.cdc0e910cc1e.svg

                              HTTP Response

                              200

                              HTTP Request

                              GET https://www.mozilla.org/media/protocol/img/icons/social/tiktok/white.599403de7ac0.svg

                              HTTP Response

                              200

                              HTTP Request

                              GET https://www.mozilla.org/media/protocol/img/icons/social/spotify/white.aa5334e85bae.svg

                              HTTP Request

                              GET https://www.mozilla.org/media/protocol/img/icons/social/youtube/white.4f314c43c69d.svg

                              HTTP Request

                              GET https://www.mozilla.org/media/img/icons/m24-small/globe-white.a76258f6a4cc.svg

                              HTTP Request

                              GET https://www.mozilla.org/media/img/icons/m24-small/down-caret-white.3aab868855c7.svg

                              HTTP Request

                              GET https://www.mozilla.org/media/protocol/fonts/Inter-Regular.d55e957612a3.woff2

                              HTTP Request

                              GET https://www.mozilla.org/media/protocol/fonts/Metropolis-Bold.6a80125e795a.woff2

                              HTTP Request

                              GET https://www.mozilla.org/media/fonts/m24/mozilla-text/MozillaText-SemiBold.c9ce5296db65.woff2

                              HTTP Request

                              GET https://www.mozilla.org/media/fonts/m24/mozilla-text/MozillaText-Regular.3fa5c88b0954.woff2

                              HTTP Request

                              GET https://www.mozilla.org/media/img/firefox/welcome/page20-21/back-up.b351cf7c2c5c.svg

                              HTTP Request

                              GET https://www.mozilla.org/media/img/firefox/welcome/page20-21/add-ons.809f56bff087.svg

                              HTTP Request

                              GET https://www.mozilla.org/media/img/firefox/welcome/page20-21/community.bf0cb1c38902.svg

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://www.mozilla.org/media/img/favicons/firefox/browser/favicon-196x196.59e3822720be.png

                              HTTP Request

                              GET https://www.mozilla.org/media/img/favicons/firefox/browser/favicon.f093404c0135.ico

                              HTTP Response

                              200

                              HTTP Response

                              200
                            • 151.101.3.19:443
                              www.mozilla.org
                              tls, http2
                              firefox.exe
                              1.5kB
                              3.9kB
                              13
                              12
                            • 34.117.188.166:443
                              spocs.getpocket.com
                              tls, http2
                              firefox.exe
                              1.8kB
                              5.9kB
                              16
                              17
                            • 127.0.0.1:49756
                              firefox.exe
                            • 127.0.0.1:49764
                              firefox.exe
                            • 172.217.20.164:443
                              https://www.google.com/recaptcha/api.js
                              tls, http2
                              firefox.exe
                              3.2kB
                              12.8kB
                              24
                              34

                              HTTP Request

                              GET https://www.google.com/search?client=firefox-b-d&q=hashtag

                              HTTP Request

                              GET https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fclient%3Dfirefox-b-d%26q%3Dhashtag&q=EgS117BTGKysm7sGIjCCffrXHOhN71vu-jeogGdygaVg01jum0_3L9xnIs_Hys3M9ndSkUpFfEq02Grtt_QyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM

                              HTTP Response

                              429

                              HTTP Request

                              GET https://www.google.com/recaptcha/api.js
                            • 172.217.20.164:443
                              www.google.com
                              tls, http2
                              firefox.exe
                              1.4kB
                              5.2kB
                              11
                              10
                            • 52.142.124.215:80
                              ddg.gg
                              firefox.exe
                              190 B
                              92 B
                              4
                              2
                            • 52.142.124.215:80
                              http://ddg.gg/
                              http
                              firefox.exe
                              662 B
                              735 B
                              7
                              6

                              HTTP Request

                              GET http://ddg.gg/

                              HTTP Response

                              301
                            • 52.142.124.215:443
                              https://duckduckgo.com/dist/g.62d9645a1bff91d0117a.js
                              tls, http2
                              firefox.exe
                              78.3kB
                              3.4MB
                              1190
                              2570

                              HTTP Request

                              GET https://duckduckgo.com/

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/font/ProximaNova-RegIt-webfont.woff2

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/font/ProximaNova-ExtraBold-webfont.woff2

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/font/ProximaNova-Reg-webfont.woff2

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/font/ProximaNova-Sbold-webfont.woff2

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/font/ProximaNova-Bold-webfont.woff2

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/css/c64e3cce46526948.css

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/css/5fd9baeedf731742.css

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/css/a907368db829f88f.css

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/css/d7a778b86846a7fd.css

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/css/de1cb19794fd83e5.css

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/webpack-64c3d5bb8874f665.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/framework-f8115f7fae64930e.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/main-d4b13818a262f8be.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/pages/_app-52b84a5dde876133.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/12636-61ed9ec1b956b494.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/41664-0c7a5cf8f744007e.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/97179-5b6e68d94b3b6b3a.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/27575-a47bc7c3d905054b.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/81125-b74d1b6f4908497b.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/53343-e1b28b68883ff9df.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/62957-7d68a586e2f806a1.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/22868-cbd9348122d77c1b.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/25892-f67fb82768f62af4.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/41917-1597d070817d9087.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/73381-b9157a6253c5d3e8.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/64149-6960cae1da870bb4.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/26634-d8525d31fbb19710.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/59349-2b554244a2ef63c8.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/95639-17f30bca65bd9ea4.js

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/55204-ae0eef26f1bc26ef.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/pages/%5Blocale%5D-9c044649ecb45850.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/oD1VI4kCyPoypb_amISYf/_buildManifest.js

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/oD1VI4kCyPoypb_amISYf/_ssgManifest.js

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/firefox-extension.8e658fcd.svg

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices-light.png

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/backgrounds/homepage-btf-mobile-light.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/macos.61889438.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/windows.477fa143.png

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/page_home_impression?5689491&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/app-store.501fe17a.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/play-store.e5d5ed36.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/chrome-lg.a4859fb2.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/edge-lg.36af7682.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/firefox-lg.8efad702.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/opera-lg.237c4418.png

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/search-protection-ios-light.png

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/web-protection-ios-light.png

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/email-protection-ios-light.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/chunks/78597.c875db33140f7df5.js

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/backgrounds/homepage-btf-light.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/flame-narrow.70589b7c.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/flame.1241f020.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/burn@2x.be0bd36d.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/flame@2x.40e1cfa0.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/widget-small@2x.07c865df.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/widget-big@2x.a260ccf6.png

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/night@2x.4ca79636.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/dark-mode@2x.3e150d01.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png

                              HTTP Request

                              GET https://duckduckgo.com/country.json

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/atb_home_impression?379630&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false&locale=en&origin=funnel_home

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/atb_home_download_impression?63473&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&locale=en&origin=funnel_home

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-back-light.png

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/web-protection-front-light.png

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-front-light.png

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/email-protection-back-light.png

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/WIRED-LIGHT-DEFAULT.3870e504.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/VERGE-LIGHT-DEFAULT.cc76af3b.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/UT-LIGHT-DEFAULT.83ecce6a.png

                              HTTP Request

                              GET https://duckduckgo.com/_next/static/media/CNET-LIGHT-DEFAULT.7f370c49.png

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-front-light.png

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/search-protection-back-light.png

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/_next/data/oD1VI4kCyPoypb_amISYf/about.json

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/app-protection-android-light.png

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-back-light.png

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/image/pages/home/devices/how-it-works/desktop/app-protection-front-light.png

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/static-assets/favicons/DDG-iOS-icon_152x152.png

                              HTTP Request

                              GET https://duckduckgo.com/favicon.ico

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/ac/?q=h&kl=wt-wt

                              HTTP Response

                              200

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/page_home_searchbox_suggest?5411334&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false

                              HTTP Request

                              GET https://duckduckgo.com/ac/?q=ha&kl=wt-wt

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/ac/?q=has&kl=wt-wt

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/ac/?q=hash&kl=wt-wt

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/ac/?q=hasht&kl=wt-wt

                              HTTP Request

                              GET https://duckduckgo.com/ac/?q=hashta&kl=wt-wt

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/ac/?q=hashtag&kl=wt-wt

                              HTTP Response

                              200

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/page_home_searchbox_submit?7641488&b=firefox&d=d&l=en&p=windows&atb=v461-4&pre_va=_&pre_atbva=_&atbi=true&i=false&ak=false&mobileHomepageBannerDismissed=false

                              HTTP Request

                              GET https://duckduckgo.com/?t=h_&q=hashtag

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/dist/s.54d8dbeb4d33865059b6.css

                              HTTP Request

                              GET https://duckduckgo.com/dist/r.cb0b70e9c969a49a8655.css

                              HTTP Request

                              GET https://duckduckgo.com/dist/wpl.main.61734e925b14fbd21f05.css

                              HTTP Request

                              GET https://duckduckgo.com/font/ProximaNova-Reg-webfont.woff2

                              HTTP Request

                              GET https://duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2

                              HTTP Request

                              GET https://duckduckgo.com/dist/b.76f7b32785935b9052d8.js

                              HTTP Request

                              GET https://duckduckgo.com/dist/lib/l.32113981e35aa54fc221.js

                              HTTP Request

                              GET https://duckduckgo.com/dist/locale/en_US.08371c3326b19c07e64bca39bbdd38e5.js

                              HTTP Request

                              GET https://duckduckgo.com/dist/util/u.a94849abb631fa45ce7f.js

                              HTTP Request

                              GET https://duckduckgo.com/dist/wpmv.76080f364d2af8dfd75f.js

                              HTTP Request

                              GET https://duckduckgo.com/dist/wpm.main.87246e50269b255c4907.js

                              HTTP Request

                              GET https://duckduckgo.com/dist/d.4fd7fada0d09b048b9a3.js

                              HTTP Request

                              GET https://duckduckgo.com/dist/g.62d9645a1bff91d0117a.js

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200
                            • 52.142.124.215:443
                              improving.duckduckgo.com
                              tls, http2
                              firefox.exe
                              1.6kB
                              6.1kB
                              14
                              10
                            • 20.223.54.233:443
                              links.duckduckgo.com
                              tls, http2
                              firefox.exe
                              1.4kB
                              6.1kB
                              11
                              11
                            • 20.223.54.233:443
                              https://links.duckduckgo.com/d.js?q=hashtag&t=A&l=uk-en&s=0&a=h_&ct=GB&vqd=4-151242283305029547496619133909650327327&bing_market=en-GB&p_ent=&ex=-1&dp=Im1AUqql150CyiXf4StWvkYzDwSUljKMxQam45Svk0znhYUtgjHYB637nslfuuvI-iLWhUJI3hz2G4r9Eye1GQOPq6O0WvXR8QcpPCTSWTY.q32ldJvtALitSby-97iaEg&wpa=Hashtag&perf_id=ffe15d9f2825766d&parent_perf_id=978745ccc019525d&host_region=eun&sp=0&dfrsp=1&baa=1&bcca=1&bpa=1&btaa=1&wrap=1&aps=0&aboutmapsexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&eclsexp=a&litexp=a&mapsmapsexp=b&msvrtexp=b
                              tls, http2
                              firefox.exe
                              2.3kB
                              17.8kB
                              16
                              22

                              HTTP Request

                              GET https://links.duckduckgo.com/d.js?q=hashtag&t=A&l=uk-en&s=0&a=h_&ct=GB&vqd=4-151242283305029547496619133909650327327&bing_market=en-GB&p_ent=&ex=-1&dp=Im1AUqql150CyiXf4StWvkYzDwSUljKMxQam45Svk0znhYUtgjHYB637nslfuuvI-iLWhUJI3hz2G4r9Eye1GQOPq6O0WvXR8QcpPCTSWTY.q32ldJvtALitSby-97iaEg&wpa=Hashtag&perf_id=ffe15d9f2825766d&parent_perf_id=978745ccc019525d&host_region=eun&sp=0&dfrsp=1&baa=1&bcca=1&bpa=1&btaa=1&wrap=1&aps=0&aboutmapsexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&eclsexp=a&litexp=a&mapsmapsexp=b&msvrtexp=b

                              HTTP Response

                              200
                            • 52.142.124.215:443
                              https://improving.duckduckgo.com/t/serp_hidden?2651758&fromWebTab=1&vistedAltTab=na&visitedAltTabInitiallyVisible=na&nTabsVisited=1&ddgTabs=web_0&nTabs=7&altTabVisitDuration=na&darkMode=false&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&nerrors=0&ntimeouts=0&nconflicts=0&nextras=0&nsuperseded=0&pole=na&wide=na&extras=na&mainline=a1about1w2v1w8r1&sidebar=na&nshifts=0&q=hashtag&ct=GB&rl=uk-en&duckassist=0&ads=1&organics=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b
                              tls, http2
                              firefox.exe
                              22.0kB
                              874.7kB
                              198
                              705

                              HTTP Request

                              GET https://duckduckgo.com/dist/locale/en_US.08371c3326b19c07e64bca39bbdd38e5.js

                              HTTP Request

                              GET https://duckduckgo.com/font/ProximaNova-Sbold-webfont.woff2

                              HTTP Request

                              GET https://duckduckgo.com/dist/wpmv.76080f364d2af8dfd75f.js

                              HTTP Request

                              GET https://duckduckgo.com/dist/b.76f7b32785935b9052d8.js

                              HTTP Request

                              GET https://duckduckgo.com/dist/wpm.main.87246e50269b255c4907.js

                              HTTP Request

                              GET https://duckduckgo.com/dist/lib/l.32113981e35aa54fc221.js

                              HTTP Request

                              GET https://duckduckgo.com/dist/util/u.a94849abb631fa45ce7f.js

                              HTTP Request

                              GET https://duckduckgo.com/dist/g.62d9645a1bff91d0117a.js

                              HTTP Request

                              GET https://duckduckgo.com/dist/d.4fd7fada0d09b048b9a3.js

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/assets/logo_header.v109.svg

                              HTTP Request

                              GET https://duckduckgo.com/t.js?q=hashtag&t=A&l=uk-en&s=0&ct=GB&bing_market=en-GB&p_ent=&ex=-1&dp=Im1AUqql150CyiXf4StWvkYzDwSUljKMxQam45Svk0znhYUtgjHYB637nslfuuvI-iLWhUJI3hz2G4r9Eye1GQOPq6O0WvXR8QcpPCTSWTY.q32ldJvtALitSby-97iaEg&wpa=Hashtag&perf_id=ffe15d9f2825766d&parent_perf_id=978745ccc019525d&host_region=eun&dfrsp=1&baa=1&bcca=1&btaa=1&aps=0&aboutmapsexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&eclsexp=a&litexp=a&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              GET https://duckduckgo.com/post3.html

                              HTTP Request

                              GET https://duckduckgo.com/dist/s.bf8da8d2f90d4dcd31ba.js

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/dist/react-assets/fe21b530ba74e4553643.svg

                              HTTP Request

                              GET https://duckduckgo.com/dist/react-assets/212874b7047e393bacb8.svg

                              HTTP Request

                              GET https://duckduckgo.com/dist/react-assets/23d563f964108cbb5b74.svg

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/assets/onboarding/data-for-sale@2x.png

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/assets/install_arrow.svg

                              HTTP Request

                              GET https://duckduckgo.com/assets/onboarding/atb-check.svg

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/dist/p.f5b58579149e7488209f.js

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/assets/icons/meta/DDG-iOS-icon_152x152.png?v=2

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/serp_browser_support?9152291&csssupports=1&csscustomproperties=1&cssgrid=1&cssgridadvanced=1&jsmodules=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/atbsi_firefox_v461-4?2862572&l=en_US&p=windows&ax=false&pre_va=_&pre_atbva=_&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/si?3611500&b=firefox&atbi=true&i=false&d=d&l=en_US&p=windows&pre_atb=v461-4&ax=false&ak=false&serp_return=0&pre_va=_&pre_atbva=_&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Response

                              200

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/apss_f?4333506&preloaded=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/l_d_re?335189&iao=1&rl=uk-en&dl=&ck=0&atbi=true&i=false&q=hashtag&ct=GB&kl=uk-en&kp=-1&serp_return=0&djsd=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/ias_web?4044520&fromWebTab=1&initialState=active&timeSincePageLoad=140&timeSinceDeepStarted=8&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/ias_images?703954&fromWebTab=1&initialState=inactive&timeSincePageLoad=140&timeSinceDeepStarted=8&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/ias_videos?6115492&fromWebTab=1&initialState=inactive&timeSincePageLoad=141&timeSinceDeepStarted=9&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/ias_news?4463112&fromWebTab=1&initialState=inactive&timeSincePageLoad=141&timeSinceDeepStarted=9&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/ias_maps_expanded?8252694&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/ias_products?334100&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/ias_chat?3272444&fromWebTab=1&initialState=inactive&timeSincePageLoad=142&timeSinceDeepStarted=10&timeSinceDeepFinished=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/i/7cb3af6667f33259.jpg

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/assets/icons/favicons/wikipedia.png

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/assets/icons/favicons/youtube.png

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/assets/icons/related/loupe-grey.svg

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/ad_bingv7aa?6808854&n=1&rl=uk-en&sld=0&d=brand24.com&ds=brand24.com&debug=%5B%7B%22siteLinksLength%22%3A0%2C%22type%22%3A%22%22%7D%5D&q=hashtag&ct=GB&kl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&ad_unit_index=8&isig=about:m&click_source=ad&instant_answers_shown=about%2Cvideos%2Crelated_searches&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              GET https://duckduckgo.com/y.js?ifu=%7B3%7Dappid%3D055AAD1BA669BEB8B048128DC89A107C678B527B%26rguid%3D03ee7f5a6852419d91d3017c61b6a4b5&iurl=%7B2%7DIG%3D7333678FF73344319EE73F71200F96F1%26CID%3D2D6B855AE21D6B6836169006E3506AC9%26Type%3DEvent.CPT%26DATA%3D0&impr=1m%3A6

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/iaoi_wikipedia_fathead?7218733&id=about&fot=i&lot=i&dev=sidebar:relocated&fsig=m&ss=0&sp=0&im=1&ism=1&px=0&ul=0&wt=Hashtag&ibv=0&adc=1&default=1&area=mainline&wide=0&index=1&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/iaoi_videos?4365888&id=videos&fot=i&lot=i&dev=mainline:slotted&fsig=na&ss=0&sp=0&im=1&ism=0&px=0&ul=0&adc=1&default=1&area=mainline&wide=0&index=4&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/iaoi_related_searches?8732386&id=related_searches&fot=i&lot=i&dev=mainline:slotted&fsig=na&ss=0&sp=0&im=1&ism=0&px=0&ul=0&adc=1&default=1&area=mainline&wide=0&index=13&vertical=web&placeholder=0&placeholdertimeout=0&loadingTime=0&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&kp=-1&serp_return=0&bing_market=en-GB&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/moreresults?950438&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/l2_d_re?3715292&osl=1&u=bingv7aa&rc=10&oll=en:10&q=hashtag&ct=GB&rl=uk-en&serp_return=0&organic_above_fold=0&bing_market=en-GB&has_rich_facts=false&djsd=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/adsummary?3722905&page=1&mainline_ad=1&mainline_products=0&mainline_products_middle=0&mainline_autoads=0&mainline_toursactivities=0&mainline_creditcards=0&sidebar_ad=0&sidebar_products=0&sidebar_products_middle=0&sidebar_autoads=0&sidebar_toursactivities=0&sidebar_creditcards=0&sidebar_multimedia_ad=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/dev?3211213&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&nerrors=0&ntimeouts=0&nconflicts=0&nextras=0&nsuperseded=0&pole=na&wide=na&extras=na&mainline=a1about1w2v1w8r1&sidebar=na&nshifts=0&d=dictionary_definition%3Aother%3Amainline%3Adata%3A0%2Cvideos%3Amodule%3Amainline%3Aslotted%3A0%2Crelated_searches%3Amodule%3Amainline%3Aslotted%3A0%2Cabout%3Amodule%3Asidebar%3Arelocated%3A0&q=hashtag&serp_return=0&organic_above_fold=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/iaui?683383&missing=en_wikipedia_queries%2Cnlp_fathead%2Cnlp_wiki%2Cwikinlp%2Cdictionary_definition&shown=about%2Cvideos%2Crelated_searches&r1=en_wikipedia_queries,nlp_fathead,nlp_wiki,wikinlp&r2=wikinlp&r4=dictionary_definition&r6=dictionary_definition,wikinlp&r8=wikinlp&q=hashtag&ct=GB&d=d&kl=uk-en&rl=uk-en&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/im_s?7403124&bfcache=0&bounce=0&vertical=web&retry=0&page=1&layoutready=1&abaready=1&aba=0&blay=a1dic1w2v1w8r1,e1&isig=about:m&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Response

                              200

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/webvitals?7053917&fromWebTab=1&TTFB=110.0000&FCP=692.0000&LCP=834.0000&has_performance=1&is_cached=0&navigation_type=navigate&has_back_data=1&is_loaded_from_bfcache=0&is_bounce_back=0&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Request

                              POST https://improving.duckduckgo.com/t/serp_hidden?2651758&fromWebTab=1&vistedAltTab=na&visitedAltTabInitiallyVisible=na&nTabsVisited=1&ddgTabs=web_0&nTabs=7&altTabVisitDuration=na&darkMode=false&fsig=about%3Am%2Cvideos%3An%2Crelated_searches%3An&nerrors=0&ntimeouts=0&nconflicts=0&nextras=0&nsuperseded=0&pole=na&wide=na&extras=na&mainline=a1about1w2v1w8r1&sidebar=na&nshifts=0&q=hashtag&ct=GB&rl=uk-en&duckassist=0&ads=1&organics=1&aboutmapsexp=b&aiheaderexp=b&bccaexp=b&biaexp=b&btaaexp=b&direxp=b&duckchat_alpha=b&eclsexp=a&feedbackexp=b&litexp=a&localexp=b&mapsexp=b&mapsmapsexp=b&msvrtexp=b

                              HTTP Response

                              200

                              HTTP Response

                              200
                            • 52.142.125.222:443
                              https://external-content.duckduckgo.com/ip3/dictionary.cambridge.org.ico
                              tls, http2
                              firefox.exe
                              6.0kB
                              91.4kB
                              43
                              81

                              HTTP Request

                              GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fwww.bing.com%2Fth%3Fpid%3DAdsPlus%26id%3DODLS.43603529-9bfa-422a-bee1-1dfb8baf1ad8%26w%3D32%26h%3D32&f=1

                              HTTP Request

                              GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse3.mm.bing.net%2Fth%3Fid%3DOVP.6lSWTHIpJqlPry2FuZ-mdAHgFo%26pid%3DApi%26h%3D120&f=1&ipt=5b1c61bd4969a4d9d6757be05c584edce04a60d5d99860ece2b2796b5192bc1b&ipo=videos

                              HTTP Request

                              GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.oVmL5RBb3tk-zb9fu6_SWAHgFo%26pid%3DApi%26h%3D120&f=1&ipt=59dfa7a2c5d0e43eb5d98167a444fabf01a88bf6f6cd6286e6a04fe8e8029d67&ipo=videos

                              HTTP Request

                              GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.-3bGaMXiHqeXdCXO4JJqVgEkII%26pid%3DApi%26h%3D120&f=1&ipt=d3943bfbfab4bcc5042bc2e7cd2357d330af3c990955b6b255a49ac2a420e1b3&ipo=videos

                              HTTP Request

                              GET https://external-content.duckduckgo.com/ip3/www.tiktok.com.ico

                              HTTP Request

                              GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse2.mm.bing.net%2Fth%3Fid%3DOVP.fmFB0flDQgaeP_XJEUFIXQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=8af6dd4ae6faac70e73918a7112bd5b9068646eb8380b45425050ee8d0c4d2af&ipo=videos

                              HTTP Request

                              GET https://external-content.duckduckgo.com/ip3/www.merriam-webster.com.ico

                              HTTP Request

                              GET https://external-content.duckduckgo.com/ip3/www.wix.com.ico

                              HTTP Request

                              GET https://external-content.duckduckgo.com/ip3/kaydee.net.ico

                              HTTP Request

                              GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse3.mm.bing.net%2Fth%3Fid%3DOVP.cBEW4e8NrYwZUF2uITDATQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=35c71e22b0dc653e41ed826613c9173b502bed55d043d1f83efed88e4225c5b6&ipo=videos

                              HTTP Request

                              GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.zEGBH_hDdxJ_KKnZ7wwdCQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=fd6c7d3b328fbd199e8dded8ef4cfa383377c7a5406d63defdd37e4c9469cb6f&ipo=videos

                              HTTP Request

                              GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse4.mm.bing.net%2Fth%3Fid%3DOVP.i9CTD0EqpE7NyNKOSfcinQHgFo%26pid%3DApi%26h%3D120&f=1&ipt=2c55c7b7c44ef2f0d803a77d4415bfc9ba2ad4fdd33194ad941cee9100c9b461&ipo=videos

                              HTTP Request

                              GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.QfNbDvfDIW3R4gHclrMc6wHgFo%26pid%3DApi%26h%3D120&f=1&ipt=4bf2c823d82051c995a30b3703059f969eb7de0c179352d2c9225086c7d7918e&ipo=videos

                              HTTP Request

                              GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse2.mm.bing.net%2Fth%3Fid%3DOVP.CP1DuyiNb0BJ-Cy5rqq_8AHgFo%26pid%3DApi%26h%3D120&f=1&ipt=742987b8f11c36311794f4c14d6989af638785f094d8911679f99380b6534a93&ipo=videos

                              HTTP Request

                              GET https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Ftse1.mm.bing.net%2Fth%3Fid%3DOVP.bpwSf5b3PfM1JLjUp49P9wHgFo%26pid%3DApi%26h%3D120&f=1&ipt=efa9cedca54bc1d303aa66932b16a1e95e9da644168eb1449acecaa07958254a&ipo=videos

                              HTTP Request

                              GET https://external-content.duckduckgo.com/ip3/www.britannica.com.ico

                              HTTP Request

                              GET https://external-content.duckduckgo.com/ip3/www.hashtags.org.ico

                              HTTP Request

                              GET https://external-content.duckduckgo.com/ip3/blog.hootsuite.com.ico

                              HTTP Request

                              GET https://external-content.duckduckgo.com/ip3/www.socialpilot.co.ico

                              HTTP Request

                              GET https://external-content.duckduckgo.com/ip3/dictionary.cambridge.org.ico

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              404

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200

                              HTTP Response

                              200
                            • 52.142.125.222:443
                              external-content.duckduckgo.com
                              tls, http2
                              firefox.exe
                              1.4kB
                              6.1kB
                              10
                              12
                            • 52.142.125.222:443
                              external-content.duckduckgo.com
                              tls, http2
                              firefox.exe
                              1.4kB
                              6.2kB
                              10
                              14
                            • 52.142.125.222:443
                              external-content.duckduckgo.com
                              tls, http2
                              firefox.exe
                              1.5kB
                              6.2kB
                              11
                              12
                            • 52.142.125.222:443
                              external-content.duckduckgo.com
                              tls, http2
                              firefox.exe
                              1.4kB
                              6.2kB
                              10
                              12
                            • 52.142.125.222:443
                              external-content.duckduckgo.com
                              tls, http2
                              firefox.exe
                              1.5kB
                              6.2kB
                              11
                              12
                            • 172.217.20.174:443
                              https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x64.zip
                              tls, http2
                              firefox.exe
                              1.6kB
                              8.9kB
                              17
                              21

                              HTTP Request

                              GET https://redirector.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x64.zip
                            • 88.221.134.209:80
                              http://ciscobinary.openh264.org/openh264-win64-31c4d2e4a037526fd30d4e5c39f60885986cf865.zip
                              http
                              firefox.exe
                              5.5kB
                              506.9kB
                              112
                              377

                              HTTP Request

                              GET http://ciscobinary.openh264.org/openh264-win64-31c4d2e4a037526fd30d4e5c39f60885986cf865.zip

                              HTTP Response

                              200
                            • 74.125.175.169:443
                              https://r4---sn-aigzrnsz.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x64.zip?cms_redirect=yes&met=1734792769,&mh=R8&mip=181.215.176.83&mm=28&mn=sn-aigzrnsz&ms=nvh&mt=1734792259&mv=m&mvi=4&pl=27&rmhost=r1---sn-aigzrnsz.gvt1.com&rms=nvh,nvh&shardbypass=sd&smhost=r2---sn-aigzrn7s.gvt1.com
                              tls, http
                              firefox.exe
                              231.7kB
                              15.0MB
                              4063
                              10730

                              HTTP Request

                              GET https://r4---sn-aigzrnsz.gvt1.com/edgedl/widevine-cdm/4.10.2710.0-win-x64.zip?cms_redirect=yes&met=1734792769,&mh=R8&mip=181.215.176.83&mm=28&mn=sn-aigzrnsz&ms=nvh&mt=1734792259&mv=m&mvi=4&pl=27&rmhost=r1---sn-aigzrnsz.gvt1.com&rms=nvh,nvh&shardbypass=sd&smhost=r2---sn-aigzrn7s.gvt1.com

                              HTTP Response

                              200
                            • 45.112.123.126:80
                              gofile.io
                              190 B
                              92 B
                              4
                              2
                            • 45.112.123.126:80
                              http://gofile.io/
                              http
                              757 B
                              754 B
                              9
                              8

                              HTTP Request

                              GET http://gofile.io/

                              HTTP Response

                              301
                            • 45.112.123.126:443
                              gofile.io
                              tls
                              5.7kB
                              450.5kB
                              70
                              345
                            • 51.75.242.210:443
                              s.gofile.io
                              tls
                              2.3kB
                              6.2kB
                              11
                              14
                            • 51.75.242.210:443
                              s.gofile.io
                              tls
                              3.1kB
                              5.3kB
                              18
                              20
                            • 45.112.123.126:443
                              api.gofile.io
                              tls
                              4.5kB
                              18.3kB
                              34
                              42
                            • 52.142.124.215:443
                              improving.duckduckgo.com
                              tls
                              2.7kB
                              7.1kB
                              14
                              21
                            • 94.139.32.11:443
                              store3.gofile.io
                              tls
                              106.2kB
                              7.8kB
                              89
                              51
                            • 94.139.32.11:443
                              store3.gofile.io
                              tls
                              1.4kB
                              4.6kB
                              10
                              9
                            • 8.8.8.8:53
                              28.118.140.52.in-addr.arpa
                              dns
                              72 B
                              158 B
                              1
                              1

                              DNS Request

                              28.118.140.52.in-addr.arpa

                            • 8.8.8.8:53
                              71.159.190.20.in-addr.arpa
                              dns
                              72 B
                              158 B
                              1
                              1

                              DNS Request

                              71.159.190.20.in-addr.arpa

                            • 8.8.8.8:53
                              97.17.167.52.in-addr.arpa
                              dns
                              71 B
                              145 B
                              1
                              1

                              DNS Request

                              97.17.167.52.in-addr.arpa

                            • 8.8.8.8:53
                              149.220.183.52.in-addr.arpa
                              dns
                              146 B
                              147 B
                              2
                              1

                              DNS Request

                              149.220.183.52.in-addr.arpa

                              DNS Request

                              149.220.183.52.in-addr.arpa

                            • 8.8.8.8:53
                              checkappexec.microsoft.com
                              dns
                              72 B
                              192 B
                              1
                              1

                              DNS Request

                              checkappexec.microsoft.com

                              DNS Response

                              172.165.61.93

                            • 8.8.8.8:53
                              93.61.165.172.in-addr.arpa
                              dns
                              72 B
                              158 B
                              1
                              1

                              DNS Request

                              93.61.165.172.in-addr.arpa

                            • 8.8.8.8:53
                              212.20.149.52.in-addr.arpa
                              dns
                              72 B
                              146 B
                              1
                              1

                              DNS Request

                              212.20.149.52.in-addr.arpa

                            • 8.8.8.8:53
                              15.164.165.52.in-addr.arpa
                              dns
                              72 B
                              146 B
                              1
                              1

                              DNS Request

                              15.164.165.52.in-addr.arpa

                            • 8.8.8.8:53
                              83.210.23.2.in-addr.arpa
                              dns
                              70 B
                              133 B
                              1
                              1

                              DNS Request

                              83.210.23.2.in-addr.arpa

                            • 8.8.8.8:53
                              14.227.111.52.in-addr.arpa
                              dns
                              72 B
                              158 B
                              1
                              1

                              DNS Request

                              14.227.111.52.in-addr.arpa

                            • 8.8.8.8:53
                              www.mozilla.org
                              dns
                              firefox.exe
                              61 B
                              166 B
                              1
                              1

                              DNS Request

                              www.mozilla.org

                              DNS Response

                              151.101.3.19
                              151.101.67.19
                              151.101.131.19
                              151.101.195.19

                            • 8.8.8.8:53
                              www-mozilla.fastly-edge.com
                              dns
                              firefox.exe
                              73 B
                              137 B
                              1
                              1

                              DNS Request

                              www-mozilla.fastly-edge.com

                              DNS Response

                              151.101.195.19
                              151.101.3.19
                              151.101.131.19
                              151.101.67.19

                            • 8.8.8.8:53
                              www-mozilla.fastly-edge.com
                              dns
                              firefox.exe
                              73 B
                              185 B
                              1
                              1

                              DNS Request

                              www-mozilla.fastly-edge.com

                              DNS Response

                              2a04:4e42:600::787
                              2a04:4e42:400::787
                              2a04:4e42:200::787
                              2a04:4e42::787

                            • 8.8.8.8:53
                              spocs.getpocket.com
                              dns
                              firefox.exe
                              65 B
                              131 B
                              1
                              1

                              DNS Request

                              spocs.getpocket.com

                              DNS Response

                              34.117.188.166

                            • 8.8.8.8:53
                              firefox-api-proxy.cdn.mozilla.net
                              dns
                              firefox.exe
                              79 B
                              160 B
                              1
                              1

                              DNS Request

                              firefox-api-proxy.cdn.mozilla.net

                              DNS Response

                              34.149.97.1

                            • 34.117.188.166:443
                              spocs.getpocket.com
                              https
                              firefox.exe
                              2.1kB
                              11.6kB
                              9
                              13
                            • 8.8.8.8:53
                              prod.ads.prod.webservices.mozgcp.net
                              dns
                              firefox.exe
                              82 B
                              98 B
                              1
                              1

                              DNS Request

                              prod.ads.prod.webservices.mozgcp.net

                              DNS Response

                              34.117.188.166

                            • 34.149.97.1:443
                              firefox-api-proxy.cdn.mozilla.net
                              https
                              firefox.exe
                              2.1kB
                              12.7kB
                              7
                              13
                            • 8.8.8.8:53
                              shavar.prod.mozaws.net
                              dns
                              firefox.exe
                              68 B
                              116 B
                              1
                              1

                              DNS Request

                              shavar.prod.mozaws.net

                              DNS Response

                              52.40.120.141
                              44.240.87.158
                              44.228.225.150

                            • 8.8.8.8:53
                              firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net
                              dns
                              firefox.exe
                              100 B
                              116 B
                              1
                              1

                              DNS Request

                              firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net

                              DNS Response

                              34.149.97.1

                            • 8.8.8.8:53
                              prod.content-signature-chains.prod.webservices.mozgcp.net
                              dns
                              firefox.exe
                              103 B
                              119 B
                              1
                              1

                              DNS Request

                              prod.content-signature-chains.prod.webservices.mozgcp.net

                              DNS Response

                              34.160.144.191

                            • 8.8.8.8:53
                              prod.remote-settings.prod.webservices.mozgcp.net
                              dns
                              firefox.exe
                              94 B
                              110 B
                              1
                              1

                              DNS Request

                              prod.remote-settings.prod.webservices.mozgcp.net

                              DNS Response

                              34.149.100.209

                            • 8.8.8.8:53
                              prod.ads.prod.webservices.mozgcp.net
                              dns
                              firefox.exe
                              82 B
                              175 B
                              1
                              1

                              DNS Request

                              prod.ads.prod.webservices.mozgcp.net

                            • 8.8.8.8:53
                              shavar.prod.mozaws.net
                              dns
                              firefox.exe
                              68 B
                              153 B
                              1
                              1

                              DNS Request

                              shavar.prod.mozaws.net

                            • 8.8.8.8:53
                              firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net
                              dns
                              firefox.exe
                              100 B
                              128 B
                              1
                              1

                              DNS Request

                              firefox-api-proxy-prod.pocket.prod.cloudops.mozgcp.net

                              DNS Response

                              2600:1901:0:74e4::

                            • 8.8.8.8:53
                              prod.content-signature-chains.prod.webservices.mozgcp.net
                              dns
                              firefox.exe
                              103 B
                              131 B
                              1
                              1

                              DNS Request

                              prod.content-signature-chains.prod.webservices.mozgcp.net

                              DNS Response

                              2600:1901:0:92a9::

                            • 8.8.8.8:53
                              prod.remote-settings.prod.webservices.mozgcp.net
                              dns
                              firefox.exe
                              94 B
                              187 B
                              1
                              1

                              DNS Request

                              prod.remote-settings.prod.webservices.mozgcp.net

                            • 8.8.8.8:53
                              19.3.101.151.in-addr.arpa
                              dns
                              71 B
                              131 B
                              1
                              1

                              DNS Request

                              19.3.101.151.in-addr.arpa

                            • 8.8.8.8:53
                              150.225.228.44.in-addr.arpa
                              dns
                              146 B
                              274 B
                              2
                              2

                              DNS Request

                              150.225.228.44.in-addr.arpa

                              DNS Request

                              150.225.228.44.in-addr.arpa

                            • 8.8.8.8:53
                              www.google.com
                              dns
                              firefox.exe
                              120 B
                              152 B
                              2
                              2

                              DNS Request

                              www.google.com

                              DNS Request

                              www.google.com

                              DNS Response

                              172.217.20.164

                              DNS Response

                              172.217.20.164

                            • 8.8.8.8:53
                              www.google.com
                              dns
                              firefox.exe
                              60 B
                              76 B
                              1
                              1

                              DNS Request

                              www.google.com

                              DNS Response

                              172.217.20.164

                            • 8.8.8.8:53
                              www.google.com
                              dns
                              firefox.exe
                              120 B
                              176 B
                              2
                              2

                              DNS Request

                              www.google.com

                              DNS Request

                              www.google.com

                              DNS Response

                              2a00:1450:4007:80c::2004

                              DNS Response

                              2a00:1450:4007:80c::2004

                            • 172.217.20.164:443
                              www.google.com
                              https
                              firefox.exe
                              6.7kB
                              54.8kB
                              23
                              54
                            • 8.8.8.8:53
                              164.20.217.172.in-addr.arpa
                              dns
                              73 B
                              171 B
                              1
                              1

                              DNS Request

                              164.20.217.172.in-addr.arpa

                            • 8.8.8.8:53
                              195.20.217.172.in-addr.arpa
                              dns
                              73 B
                              171 B
                              1
                              1

                              DNS Request

                              195.20.217.172.in-addr.arpa

                            • 8.8.8.8:53
                              163.20.217.172.in-addr.arpa
                              dns
                              73 B
                              171 B
                              1
                              1

                              DNS Request

                              163.20.217.172.in-addr.arpa

                            • 8.8.8.8:53
                              ddg.gg
                              dns
                              firefox.exe
                              104 B
                              136 B
                              2
                              2

                              DNS Request

                              ddg.gg

                              DNS Request

                              ddg.gg

                              DNS Response

                              52.142.124.215

                              DNS Response

                              52.142.124.215

                            • 8.8.8.8:53
                              ddg.gg
                              dns
                              firefox.exe
                              104 B
                              136 B
                              2
                              2

                              DNS Request

                              ddg.gg

                              DNS Request

                              ddg.gg

                              DNS Response

                              52.142.124.215

                              DNS Response

                              52.142.124.215

                            • 8.8.8.8:53
                              ddg.gg
                              dns
                              firefox.exe
                              104 B
                              234 B
                              2
                              2

                              DNS Request

                              ddg.gg

                              DNS Request

                              ddg.gg

                            • 8.8.8.8:53
                              215.124.142.52.in-addr.arpa
                              dns
                              73 B
                              147 B
                              1
                              1

                              DNS Request

                              215.124.142.52.in-addr.arpa

                            • 8.8.8.8:53
                              duckduckgo.com
                              dns
                              firefox.exe
                              60 B
                              76 B
                              1
                              1

                              DNS Request

                              duckduckgo.com

                              DNS Response

                              52.142.124.215

                            • 8.8.8.8:53
                              duckduckgo.com
                              dns
                              firefox.exe
                              60 B
                              76 B
                              1
                              1

                              DNS Request

                              duckduckgo.com

                              DNS Response

                              52.142.124.215

                            • 8.8.8.8:53
                              duckduckgo.com
                              dns
                              firefox.exe
                              120 B
                              250 B
                              2
                              2

                              DNS Request

                              duckduckgo.com

                              DNS Request

                              duckduckgo.com

                            • 8.8.8.8:53
                              improving.duckduckgo.com
                              dns
                              firefox.exe
                              140 B
                              200 B
                              2
                              2

                              DNS Request

                              improving.duckduckgo.com

                              DNS Request

                              improving.duckduckgo.com

                              DNS Response

                              52.142.124.215

                              DNS Response

                              52.142.124.215

                            • 8.8.8.8:53
                              links.duckduckgo.com
                              dns
                              firefox.exe
                              132 B
                              164 B
                              2
                              2

                              DNS Request

                              links.duckduckgo.com

                              DNS Request

                              links.duckduckgo.com

                              DNS Response

                              20.223.54.233

                              DNS Response

                              20.223.54.233

                            • 8.8.8.8:53
                              links.duckduckgo.com
                              dns
                              firefox.exe
                              132 B
                              164 B
                              2
                              2

                              DNS Request

                              links.duckduckgo.com

                              DNS Request

                              links.duckduckgo.com

                              DNS Response

                              20.223.54.233

                              DNS Response

                              20.223.54.233

                            • 8.8.8.8:53
                              links.duckduckgo.com
                              dns
                              firefox.exe
                              66 B
                              131 B
                              1
                              1

                              DNS Request

                              links.duckduckgo.com

                            • 8.8.8.8:53
                              233.54.223.20.in-addr.arpa
                              dns
                              72 B
                              158 B
                              1
                              1

                              DNS Request

                              233.54.223.20.in-addr.arpa

                            • 8.8.8.8:53
                              external-content.duckduckgo.com
                              dns
                              firefox.exe
                              77 B
                              93 B
                              1
                              1

                              DNS Request

                              external-content.duckduckgo.com

                              DNS Response

                              52.142.125.222

                            • 8.8.8.8:53
                              external-content.duckduckgo.com
                              dns
                              firefox.exe
                              154 B
                              186 B
                              2
                              2

                              DNS Request

                              external-content.duckduckgo.com

                              DNS Request

                              external-content.duckduckgo.com

                              DNS Response

                              52.142.125.222

                              DNS Response

                              52.142.125.222

                            • 8.8.8.8:53
                              external-content.duckduckgo.com
                              dns
                              firefox.exe
                              77 B
                              142 B
                              1
                              1

                              DNS Request

                              external-content.duckduckgo.com

                            • 8.8.8.8:53
                              222.125.142.52.in-addr.arpa
                              dns
                              73 B
                              147 B
                              1
                              1

                              DNS Request

                              222.125.142.52.in-addr.arpa

                            • 8.8.8.8:53
                              location.services.mozilla.com
                              dns
                              firefox.exe
                              75 B
                              153 B
                              1
                              1

                              DNS Request

                              location.services.mozilla.com

                              DNS Response

                              35.190.72.216

                            • 8.8.8.8:53
                              prod.balrog.prod.cloudops.mozgcp.net
                              dns
                              firefox.exe
                              82 B
                              98 B
                              1
                              1

                              DNS Request

                              prod.balrog.prod.cloudops.mozgcp.net

                              DNS Response

                              35.244.181.201

                            • 8.8.8.8:53
                              prod.classify-client.prod.webservices.mozgcp.net
                              dns
                              firefox.exe
                              188 B
                              220 B
                              2
                              2

                              DNS Request

                              prod.classify-client.prod.webservices.mozgcp.net

                              DNS Response

                              35.190.72.216

                              DNS Request

                              prod.classify-client.prod.webservices.mozgcp.net

                              DNS Response

                              35.190.72.216

                            • 35.190.72.216:443
                              prod.classify-client.prod.webservices.mozgcp.net
                              https
                              firefox.exe
                              2.0kB
                              4.6kB
                              7
                              8
                            • 8.8.8.8:53
                              prod.balrog.prod.cloudops.mozgcp.net
                              dns
                              firefox.exe
                              164 B
                              350 B
                              2
                              2

                              DNS Request

                              prod.balrog.prod.cloudops.mozgcp.net

                              DNS Request

                              prod.balrog.prod.cloudops.mozgcp.net

                            • 8.8.8.8:53
                              prod.classify-client.prod.webservices.mozgcp.net
                              dns
                              firefox.exe
                              94 B
                              187 B
                              1
                              1

                              DNS Request

                              prod.classify-client.prod.webservices.mozgcp.net

                            • 8.8.8.8:53
                              redirector.gvt1.com
                              dns
                              firefox.exe
                              130 B
                              162 B
                              2
                              2

                              DNS Request

                              redirector.gvt1.com

                              DNS Request

                              redirector.gvt1.com

                              DNS Response

                              172.217.20.174

                              DNS Response

                              172.217.20.174

                            • 8.8.8.8:53
                              ciscobinary.openh264.org
                              dns
                              firefox.exe
                              140 B
                              572 B
                              2
                              2

                              DNS Request

                              ciscobinary.openh264.org

                              DNS Request

                              ciscobinary.openh264.org

                              DNS Response

                              88.221.134.209
                              88.221.134.155

                              DNS Response

                              88.221.134.209
                              88.221.134.155

                            • 8.8.8.8:53
                              redirector.gvt1.com
                              dns
                              firefox.exe
                              130 B
                              162 B
                              2
                              2

                              DNS Request

                              redirector.gvt1.com

                              DNS Request

                              redirector.gvt1.com

                              DNS Response

                              172.217.20.174

                              DNS Response

                              172.217.20.174

                            • 8.8.8.8:53
                              a19.dscg10.akamai.net
                              dns
                              firefox.exe
                              134 B
                              198 B
                              2
                              2

                              DNS Request

                              a19.dscg10.akamai.net

                              DNS Request

                              a19.dscg10.akamai.net

                              DNS Response

                              88.221.134.209
                              88.221.134.155

                              DNS Response

                              88.221.134.155
                              88.221.134.209

                            • 8.8.8.8:53
                              redirector.gvt1.com
                              dns
                              firefox.exe
                              130 B
                              186 B
                              2
                              2

                              DNS Request

                              redirector.gvt1.com

                              DNS Request

                              redirector.gvt1.com

                              DNS Response

                              2a00:1450:4007:80c::200e

                              DNS Response

                              2a00:1450:4007:80c::200e

                            • 8.8.8.8:53
                              a19.dscg10.akamai.net
                              dns
                              firefox.exe
                              134 B
                              246 B
                              2
                              2

                              DNS Request

                              a19.dscg10.akamai.net

                              DNS Request

                              a19.dscg10.akamai.net

                              DNS Response

                              2a02:26f0:a1::58dd:86d1
                              2a02:26f0:a1::58dd:869b

                              DNS Response

                              2a02:26f0:a1::58dd:869b
                              2a02:26f0:a1::58dd:86d1

                            • 172.217.20.174:443
                              redirector.gvt1.com
                              https
                              firefox.exe
                              1.9kB
                              9.3kB
                              7
                              10
                            • 8.8.8.8:53
                              r4---sn-aigzrnsz.gvt1.com
                              dns
                              firefox.exe
                              142 B
                              232 B
                              2
                              2

                              DNS Request

                              r4---sn-aigzrnsz.gvt1.com

                              DNS Request

                              r4---sn-aigzrnsz.gvt1.com

                              DNS Response

                              74.125.175.169

                              DNS Response

                              74.125.175.169

                            • 8.8.8.8:53
                              r4.sn-aigzrnsz.gvt1.com
                              dns
                              firefox.exe
                              138 B
                              170 B
                              2
                              2

                              DNS Request

                              r4.sn-aigzrnsz.gvt1.com

                              DNS Request

                              r4.sn-aigzrnsz.gvt1.com

                              DNS Response

                              74.125.175.169

                              DNS Response

                              74.125.175.169

                            • 8.8.8.8:53
                              r4.sn-aigzrnsz.gvt1.com
                              dns
                              firefox.exe
                              138 B
                              194 B
                              2
                              2

                              DNS Request

                              r4.sn-aigzrnsz.gvt1.com

                              DNS Request

                              r4.sn-aigzrnsz.gvt1.com

                              DNS Response

                              2a00:1450:4009:1b::9

                              DNS Response

                              2a00:1450:4009:1b::9

                            • 74.125.175.169:443
                              r4.sn-aigzrnsz.gvt1.com
                              https
                              firefox.exe
                              1.7kB
                              5.9kB
                              5
                              7
                            • 8.8.8.8:53
                              216.72.190.35.in-addr.arpa
                              dns
                              144 B
                              248 B
                              2
                              2

                              DNS Request

                              216.72.190.35.in-addr.arpa

                              DNS Request

                              216.72.190.35.in-addr.arpa

                            • 8.8.8.8:53
                              209.134.221.88.in-addr.arpa
                              dns
                              146 B
                              139 B
                              2
                              1

                              DNS Request

                              209.134.221.88.in-addr.arpa

                              DNS Request

                              209.134.221.88.in-addr.arpa

                            • 8.8.8.8:53
                              174.20.217.172.in-addr.arpa
                              dns
                              146 B
                              173 B
                              2
                              1

                              DNS Request

                              174.20.217.172.in-addr.arpa

                              DNS Request

                              174.20.217.172.in-addr.arpa

                            • 8.8.8.8:53
                              169.175.125.74.in-addr.arpa
                              dns
                              219 B
                              111 B
                              3
                              1

                              DNS Request

                              169.175.125.74.in-addr.arpa

                              DNS Request

                              169.175.125.74.in-addr.arpa

                              DNS Request

                              169.175.125.74.in-addr.arpa

                            • 8.8.8.8:53
                              201.181.244.35.in-addr.arpa
                              dns
                              146 B
                              126 B
                              2
                              1

                              DNS Request

                              201.181.244.35.in-addr.arpa

                              DNS Request

                              201.181.244.35.in-addr.arpa

                            • 8.8.8.8:53
                              duckduckgo.com
                              dns
                              firefox.exe
                              120 B
                              152 B
                              2
                              2

                              DNS Request

                              duckduckgo.com

                              DNS Request

                              duckduckgo.com

                              DNS Response

                              52.142.124.215

                              DNS Response

                              52.142.124.215

                            • 8.8.8.8:53
                              duckduckgo.com
                              dns
                              firefox.exe
                              120 B
                              250 B
                              2
                              2

                              DNS Request

                              duckduckgo.com

                              DNS Request

                              duckduckgo.com

                            • 8.8.8.8:53
                              168.253.116.51.in-addr.arpa
                              dns
                              73 B
                              159 B
                              1
                              1

                              DNS Request

                              168.253.116.51.in-addr.arpa

                            • 8.8.8.8:53
                              gofile.io
                              dns
                              110 B
                              142 B
                              2
                              2

                              DNS Request

                              gofile.io

                              DNS Response

                              45.112.123.126

                              DNS Request

                              gofile.io

                              DNS Response

                              45.112.123.126

                            • 8.8.8.8:53
                              gofile.io
                              dns
                              55 B
                              71 B
                              1
                              1

                              DNS Request

                              gofile.io

                              DNS Response

                              45.112.123.126

                            • 8.8.8.8:53
                              gofile.io
                              dns
                              55 B
                              136 B
                              1
                              1

                              DNS Request

                              gofile.io

                            • 8.8.8.8:53
                              126.123.112.45.in-addr.arpa
                              dns
                              73 B
                              127 B
                              1
                              1

                              DNS Request

                              126.123.112.45.in-addr.arpa

                            • 8.8.8.8:53
                              s.gofile.io
                              dns
                              57 B
                              73 B
                              1
                              1

                              DNS Request

                              s.gofile.io

                              DNS Response

                              51.75.242.210

                            • 8.8.8.8:53
                              s.gofile.io
                              dns
                              57 B
                              73 B
                              1
                              1

                              DNS Request

                              s.gofile.io

                              DNS Response

                              51.75.242.210

                            • 8.8.8.8:53
                              s.gofile.io
                              dns
                              57 B
                              138 B
                              1
                              1

                              DNS Request

                              s.gofile.io

                            • 8.8.8.8:53
                              api.gofile.io
                              dns
                              118 B
                              150 B
                              2
                              2

                              DNS Request

                              api.gofile.io

                              DNS Response

                              45.112.123.126

                              DNS Request

                              api.gofile.io

                              DNS Response

                              45.112.123.126

                            • 8.8.8.8:53
                              api.gofile.io
                              dns
                              59 B
                              75 B
                              1
                              1

                              DNS Request

                              api.gofile.io

                              DNS Response

                              45.112.123.126

                            • 8.8.8.8:53
                              api.gofile.io
                              dns
                              59 B
                              140 B
                              1
                              1

                              DNS Request

                              api.gofile.io

                            • 8.8.8.8:53
                              210.242.75.51.in-addr.arpa
                              dns
                              72 B
                              100 B
                              1
                              1

                              DNS Request

                              210.242.75.51.in-addr.arpa

                            • 8.8.8.8:53
                              duckduckgo.com
                              dns
                              firefox.exe
                              120 B
                              152 B
                              2
                              2

                              DNS Request

                              duckduckgo.com

                              DNS Response

                              52.142.124.215

                              DNS Request

                              duckduckgo.com

                              DNS Response

                              52.142.124.215

                            • 8.8.8.8:53
                              duckduckgo.com
                              dns
                              firefox.exe
                              120 B
                              250 B
                              2
                              2

                              DNS Request

                              duckduckgo.com

                              DNS Request

                              duckduckgo.com

                            • 8.8.8.8:53
                              s.gofile.io
                              dns
                              57 B
                              138 B
                              1
                              1

                              DNS Request

                              s.gofile.io

                            • 8.8.8.8:53
                              store3.gofile.io
                              dns
                              124 B
                              156 B
                              2
                              2

                              DNS Request

                              store3.gofile.io

                              DNS Response

                              94.139.32.11

                              DNS Request

                              store3.gofile.io

                              DNS Response

                              94.139.32.11

                            • 8.8.8.8:53
                              store3.gofile.io
                              dns
                              124 B
                              156 B
                              2
                              2

                              DNS Request

                              store3.gofile.io

                              DNS Response

                              94.139.32.11

                              DNS Request

                              store3.gofile.io

                              DNS Response

                              94.139.32.11

                            • 8.8.8.8:53
                              store3.gofile.io
                              dns
                              62 B
                              143 B
                              1
                              1

                              DNS Request

                              store3.gofile.io

                            • 8.8.8.8:53
                              11.32.139.94.in-addr.arpa
                              dns
                              142 B
                              262 B
                              2
                              2

                              DNS Request

                              11.32.139.94.in-addr.arpa

                              DNS Request

                              11.32.139.94.in-addr.arpa

                            MITRE ATT&CK Enterprise v15

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            • C:\Program Files (x86)\instructions_read_me.txt

                              Filesize

                              1KB

                              MD5

                              4ba06d41a13bc5f4ddc71cf6a48cf231

                              SHA1

                              d83c4640b36339549130fcb008c6f5c8a6d67676

                              SHA256

                              8e29eb9f02be51cbdc99f8ec9b90fb29f47806f9ca804590de548d5e06f47db5

                              SHA512

                              9fe3e0546ece1c74b2b3f188fafb024309bb1048ce997c334a6fed9b9638f11aa0dc99784546241fc28893b207a239ed21f8189a51bd801bc65334bd082da88c

                            • C:\Program Files\Mozilla Firefox\firefox.exe

                              Filesize

                              655KB

                              MD5

                              470443e44566ecfc7ac2ddbec240a73f

                              SHA1

                              27bb8d2fc02cd2bbc184d07357aaa9903d88b425

                              SHA256

                              006652da0745d8672ec56598368c1f8a4896cd4a0aa5b61499d574870f94b705

                              SHA512

                              22c9bc36874abb015a7e1a28e26f186f2abbd559aad53fdcf493f2178dbc6cfe5a7324d0acadcf4a641028e61787d2f4237a8c034a3a7a6d0a7162f31e05a618

                            • C:\Program Files\Mozilla Firefox\mozglue.dll

                              Filesize

                              967KB

                              MD5

                              82958c604717fc0a15052e03a927cfa4

                              SHA1

                              829a7eb23147c31d9746ddaa30201b7127515416

                              SHA256

                              948818942a29cf21260ba389c2fdf3c001d77851500a7124c1f6a3290b8f826c

                              SHA512

                              70e5118dd760e7dc86f3641da57dad00f02b703e53230bc13e0e9e21fddcba75d3e70445d90d9f13988956e4ba20e7b54ebbdaaed18c3e7aa75a4214c2e2aff9

                            • C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\mg4xad17.default-release\activity-stream.discovery_stream.json

                              Filesize

                              18KB

                              MD5

                              e6391306c8678cf9d91c8868a51b0fa3

                              SHA1

                              3c914d26bf26ddebedc36baa5261731a78aa6189

                              SHA256

                              635795decdb5b7857b024eaae4efcaee3285eb4acedad94af9c72467e3a9023d

                              SHA512

                              23ccfb3cb58ba6a7969e4296ec80644f121eebb03b8ca59d5073c6f5458cfc31450a4450f04ea9daa49048cd8135125601344765a02825bdfdfc239cba163f1b

                            • C:\Users\Admin\AppData\Local\Temp\tmpaddon

                              Filesize

                              479KB

                              MD5

                              09372174e83dbbf696ee732fd2e875bb

                              SHA1

                              ba360186ba650a769f9303f48b7200fb5eaccee1

                              SHA256

                              c32efac42faf4b9878fb8917c5e71d89ff40de580c4f52f62e11c6cfab55167f

                              SHA512

                              b667086ed49579592d435df2b486fe30ba1b62ddd169f19e700cd079239747dd3e20058c285fa9c10a533e34f22b5198ed9b1f92ae560a3067f3e3feacc724f1

                            • C:\Users\Admin\AppData\Local\Temp\tmpaddon-1

                              Filesize

                              13.8MB

                              MD5

                              0a8747a2ac9ac08ae9508f36c6d75692

                              SHA1

                              b287a96fd6cc12433adb42193dfe06111c38eaf0

                              SHA256

                              32d544baf2facc893057a1d97db33207e642f0dacf235d8500a0b5eff934ce03

                              SHA512

                              59521f8c61236641b3299ab460c58c8f5f26fa67e828de853c2cf372f9614d58b9f541aae325b1600ec4f3a47953caacb8122b0dfce7481acfec81045735947d

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\AlternateServices.bin

                              Filesize

                              7KB

                              MD5

                              d5cf8ff54d7b6b14f96de558b15bdb75

                              SHA1

                              051ec0be2dad04926880e137984370690a98c0d3

                              SHA256

                              70cd6beaa10539f8dc9841f6827d95fff2b82e4dcc4a4300bfc075c2fb3c72ec

                              SHA512

                              a259ba884bb1eea66566192bc672a691a6d2cea5c6f34e82b8e48e3f029885a3759d456de413c03e48d43b06c325d0e32512f21535a0dcade1aeea0e13700c20

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\AlternateServices.bin

                              Filesize

                              12KB

                              MD5

                              8fac9b89aa03271a2d3c13753a921041

                              SHA1

                              8c924fa53a6db97b564b1db256d3e7e60e82ab4e

                              SHA256

                              c531dc3d659338e41ead4f7d5dbcc26e837ab578fa5f1d07430e9b841c7720af

                              SHA512

                              8d6350de22b812455d44a8dc9a7c9c962686d89887fbe7149509f1d6405c2c6df0bc6a548421d7bfef82f1858d84f4d818bac1096ff057101ba3347b7de0ead7

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\datareporting\glean\db\data.safe.tmp

                              Filesize

                              5KB

                              MD5

                              aef97928bc23cc3ac99f8cbb65a1ba16

                              SHA1

                              dd1998c62f9530c67136802ce5707b08dd1602ca

                              SHA256

                              0c359a136adc0382515eaf85f077d7c980784fe89860c2f551383858b6f731b0

                              SHA512

                              652a43b5b1dbe72b55c70ccbe98dd975437073718f3840e8af87d5eb4224be9e12b22c503ddc0007fe5315162059290e9e937350fdf70b6ab82031fc9142be5c

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\datareporting\glean\db\data.safe.tmp

                              Filesize

                              16KB

                              MD5

                              a554473a9ba8db7665167d9b77bdbcb7

                              SHA1

                              95d735753cb61eca3c143e4f73883d09fa817dbe

                              SHA256

                              85df651bc25afd26405292a3097f630e10c216068406dc0e6827232c44281b3b

                              SHA512

                              f661041318adb90e0622f0f6aba767ca06887d014bbba1854a509d12ad99ed0a363dc7e7bed6206c62ba6fd6216f54010e5c14559f5d5053379ff8c6c11c6e52

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\datareporting\glean\pending_pings\4db13cd2-325b-4114-bd9b-d8fa007dba10

                              Filesize

                              982B

                              MD5

                              0cdbddfbdb9080c1d56ff88bb001f332

                              SHA1

                              19fb2d5ff080485080c3a8e80080939a33f5d934

                              SHA256

                              855387d01873228d1f3e3d99a23d27dafd402ea9369b597a8a9ffcc510a6eab3

                              SHA512

                              13785ba4b37ed4509deb69915fdba09f0eb287a107c8d54e8bff2f9718d8464f23169372db6ebbddb17f5fde96e06ba5b04664d5e6d2e1af949742b35fc41c1b

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\datareporting\glean\pending_pings\86e22a91-e902-4e79-9f4e-39c30660a42e

                              Filesize

                              671B

                              MD5

                              b685e1694d5d8911025a7120a83f30fb

                              SHA1

                              21ca360fe9e476721b0be29c9c1e081109723123

                              SHA256

                              9df6c4d855e161f0658b26526f66128b204affdf7a621555bf352fab949cbd15

                              SHA512

                              2b6e0d6b6966d248d8b53e3fa543851f284a3d1ae05cafad9f32ff3d7105dbd77838e284083a8965adbaf4a0a63065f1ea21b328874f0ee3281ec0e9acb7bf02

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\datareporting\glean\pending_pings\a8ca14c3-df33-4675-b26e-2e7a38634c3b

                              Filesize

                              25KB

                              MD5

                              2e4cb755e405e5677c1b3f0ca6c1dc3a

                              SHA1

                              f62599a1fd6f3fe2f785bb89367716aa3c6b5f84

                              SHA256

                              b23c9d6e032d5a760b27a15d44c2e7e649440873e21d060ea83d1074d997e3ec

                              SHA512

                              b4336a042dc8ce411667afa43f83164f8e94f206a360565a610cba852994d59c53d1803a0c93f79b18070d46c5388360f39193036e13f013ffadaf33e74e7e7a

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.dll

                              Filesize

                              1.1MB

                              MD5

                              842039753bf41fa5e11b3a1383061a87

                              SHA1

                              3e8fe1d7b3ad866b06dca6c7ef1e3c50c406e153

                              SHA256

                              d88dd3bfc4a558bb943f3caa2e376da3942e48a7948763bf9a38f707c2cd0c1c

                              SHA512

                              d3320f7ac46327b7b974e74320c4d853e569061cb89ca849cd5d1706330aca629abeb4a16435c541900d839f46ff72dfde04128c450f3e1ee63c025470c19157

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\gmp-gmpopenh264\2.3.2\gmpopenh264.info

                              Filesize

                              116B

                              MD5

                              2a461e9eb87fd1955cea740a3444ee7a

                              SHA1

                              b10755914c713f5a4677494dbe8a686ed458c3c5

                              SHA256

                              4107f76ba1d9424555f4e8ea0acef69357dfff89dfa5f0ec72aa4f2d489b17bc

                              SHA512

                              34f73f7bf69d7674907f190f257516e3956f825e35a2f03d58201a5a630310b45df393f2b39669f9369d1ac990505a4b6849a0d34e8c136e1402143b6cedf2d3

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\gmp-widevinecdm\4.10.2710.0\manifest.json

                              Filesize

                              372B

                              MD5

                              bf957ad58b55f64219ab3f793e374316

                              SHA1

                              a11adc9d7f2c28e04d9b35e23b7616d0527118a1

                              SHA256

                              bbab6ca07edbed72a966835c7907b3e60c7aa3d48ddea847e5076bd05f4b1eda

                              SHA512

                              79c179b56e4893fb729b225818ab4b95a50b69666ac41d17aad0b37ab0ca8cd9f0848cbc3c5d9e69e4640a8b261d7ced592eae9bcb0e0b63c05a56e7c477f44e

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\gmp-widevinecdm\4.10.2710.0\widevinecdm.dll

                              Filesize

                              17.8MB

                              MD5

                              daf7ef3acccab478aaa7d6dc1c60f865

                              SHA1

                              f8246162b97ce4a945feced27b6ea114366ff2ad

                              SHA256

                              bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e

                              SHA512

                              5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\prefs-1.js

                              Filesize

                              10KB

                              MD5

                              d0fe3aecb848a6fef69470c7081d668e

                              SHA1

                              0e75d3403f9be5386961fa94a25418a3c9655f93

                              SHA256

                              9c05c30917dd998904e1c711eac45cf4813dda6104b7d7caef638ba7a61f2d84

                              SHA512

                              91810e9f07a999c43b48a427e4a8130cd11e13e896926f2877fc98d52c6bec8e702df1983435dfd098900ba5d3fce39e0001c0e682fa3e7dea63da3d95be6e25

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\prefs-1.js

                              Filesize

                              11KB

                              MD5

                              38018b64385d0c1ef65c7923cc64282b

                              SHA1

                              c9bd9aa9a81159a5ac7b65e22ff8c4f7447c8310

                              SHA256

                              61cc39de97dec39039658a3e2c74b5ad774459b0b950add312100cbe7faf0bdd

                              SHA512

                              cf4346ca43ea6906bc47a5a26985a6fa31454cbc9a7884cd7ecc6fa83284de6df9df0f1ad888d1c4e6d19e9b16ab532f909e4f66f310aed5b86a350a64628dcc

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\prefs.js

                              Filesize

                              10KB

                              MD5

                              c2859826b80f6f8d76311960f9551a8c

                              SHA1

                              d1fc3650fa5fcbe902333db7a1e904fba0b96f0a

                              SHA256

                              1952d60da9f37222bfc332e451f158aaf054efde13f42c649fa5bccc79009417

                              SHA512

                              da87004346a155c8388c720914518276b403df4c6cbd84bc47b68d3d006de3a1cc6bd9fb2a723cea826d9e83a1e0cf4312a3c0453e5e58c8919708205861956e

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\sessionstore-backups\recovery.baklz4

                              Filesize

                              1KB

                              MD5

                              bb8b8b4d30c87ccda10f7c43232cd353

                              SHA1

                              f74c44c84e7018c424802d6951e225f4957e70e4

                              SHA256

                              7ac1fce19d2a3f031200e9d9502020153663954ad5e65ed92a560ac2797b6e5c

                              SHA512

                              06bcdc6298bbc9a121c86137acc0f4442874793ef4cf45a3fefe9b2f8311be698f3f40d4755a7afa6e869ee73ad3219016d780621aaa09aa16510f516e7dfd87

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\sessionstore-backups\recovery.baklz4

                              Filesize

                              6KB

                              MD5

                              2215fa4a1153806c209f3a430a85a0ef

                              SHA1

                              1835e60473166a78fa9073018fe9f717eed9f8bd

                              SHA256

                              450a91b87f992b9b19408406a9c041a1dd3cb13ecdaddef81ee534515a9b87bd

                              SHA512

                              d5846ec14c1eab9a724ba45d25e7ba3268ded8c70a3481391cd3db62a503dfdf3ee54697bdbe2d641596892021161258a60d11538837f2bf1be5e585a194a85d

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\sessionstore-backups\recovery.baklz4

                              Filesize

                              8KB

                              MD5

                              8959e8d3eb5b85f04ffd1750342faf15

                              SHA1

                              91f310cdc163f7fe4cffa73f3509ec001e2a39bb

                              SHA256

                              8b469bea81bcfa98a90806ed4a8d3fe89c4bda74f18537f79fb637a3f3bf54fc

                              SHA512

                              6ffe638331ca1f91881347374bc9a852855ed8d221299a7079ba289d5b28a885601117c02dd2831ab58ab424556ce82f9daa38eda58d0a72e74b68f3f84e6c58

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\sessionstore-backups\recovery.baklz4

                              Filesize

                              5KB

                              MD5

                              f7239801953111cb6341bf1c1a31c4fe

                              SHA1

                              15a252ef6d8cb5e853158dd174bbe6fd60fc8aec

                              SHA256

                              511274f4a955f90359ab51c0751b6f78c44907b7584f279462d967d03c666732

                              SHA512

                              557913c8525e1888c1a07e13cf21185631ad6b2715c238a7dd769300829e5116ccbdb5e62c0133f490dc87da93ceea24a88d3f1ab90d993fc9612fd035830733

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\sessionstore-backups\recovery.baklz4

                              Filesize

                              4KB

                              MD5

                              3bbc3876b7ac1337be0e633c0c3e716c

                              SHA1

                              330b2e05733690f8f0c55937545feedcbcbfc3b3

                              SHA256

                              9720d276e71970a0df8a3c26e093d5ede6bf6e5ad279e2171feddfa859b5c605

                              SHA512

                              fa25d05b50ac383274dcf48922e8d79431a870a8f19bff28679437e84b8a151e3cf0967931e4ecb1e1a8d040309bdebd080a0d0f8d75fdacc08091fcd29ab227

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\sessionstore-backups\recovery.baklz4

                              Filesize

                              8KB

                              MD5

                              2da7cb0d3690ddd216284c55d0f54b37

                              SHA1

                              6ef895c3ee38f7b5723348b6d5ba6884987bb8df

                              SHA256

                              7fcf5294dffa34ebf8a91f9cd8d13eb4c1ee3aa94725f78aa1e5a2704b1fe4c2

                              SHA512

                              070ec7e80e436971e107691f820c20ef3884a95b03fe0bf62fc1c44250e3a50d307dfd1a7abb2fdc1367bafbdbdac0d8b87fb9767a83ff7f5e85f4082638e274

                            • C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mg4xad17.default-release\sessionstore-backups\recovery.baklz4

                              Filesize

                              4KB

                              MD5

                              7f1be722f324b243fb8293962ed6df08

                              SHA1

                              ac262f4ad9a4717c2e4584db3e458b50bf4540d9

                              SHA256

                              20359646cd0ee84a4276b0906e60f17211f2bbab1a93c1ba9cfa51db25534a69

                              SHA512

                              655ac93a07773c4f4efe63da1cc8aaac7f69d83e3b9971e2504be7c9d9ee14d9c7eb3c5c1b7348eaa6cfc7392c81362783e0e5999369929080eb67730b35866f

                            • C:\Users\Admin\Desktop\basta\basta.exe

                              Filesize

                              1023KB

                              MD5

                              08378cd36fdbf69dba24d14393ad564d

                              SHA1

                              c698e08ff114499e9fecf39fcbf23f652f1cdad8

                              SHA256

                              764b1117262d33f0a69b4f4c72fad607b7c71c262f60b9b2b35a21e7f4967786

                              SHA512

                              ef831fc12ad4831e180c9e5e9babbf1a2d8675a918992fc6f5306447b30e12de63e5034124e31a2d9517db4322e7aaf4a01cecf3239f2c6f6d459358849ef197

                            • C:\Users\Admin\Desktop\basta\blank.docx

                              Filesize

                              97KB

                              MD5

                              e47bd5a40495d4d754e2204dd76eb059

                              SHA1

                              4b14d26ef936233bfe7fca3b779c450273f04e45

                              SHA256

                              3b36211aadd352af6af3da8f1ee4ad32ab84023b5b1e7a756f0d385c71efa5b8

                              SHA512

                              9f5c47a462ed7508de6a0dc6a78212d7a83a93a00fec53265282bcb4cb38823b19c000c0cdeed3ca236e683cee318f5d7126ac9d2cfd9ba168e02ec2756a0dc5

                            We care about your privacy.

                            This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.