(Request) Add peekier.com as a Search Engine

[K-mikaZ]

Peekier (pronounced /'pi·ki·er/): Privacy oriented search engines.
categories : general
https://peekier.com/privacy

Example in practice:
https://peekier.com/#!searx

HEADERS:

• Request URL : https://search.peekier.com/search
• Request method : POST
• Remote address : 45.63.11.227:443
• Version : HTTP/2

CONNECTION:

• Protocol version: "TLSv1.2"
• Encryption suite: "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
• Key exchange group: "P256"
• Signature algorithm: "RSA-PKCS1-SHA512"
• HTTP Strict Transport Security: "Enabled"
• Public Key Pinning: "Disabled"
• Host: search.peekier.com
• Origin: https://peekier.com
• Referer: https://peekier.com/
• content-type: application/json; charset=utf-8

FLOW DIAGRAM:

1. doc => https://peekier.com/#!{query}
2. script => https://peekier.com/assets/engine.js ( *use for parse opts )
3. xhr => https://search.peekier.com/prewarm
4. xhr => https://search.peekier.com/suggestions
5. xhr => https://search.peekier.com/search

FORM DATA:

q : 'firefox'
opts: '{ "page" : 0, "region" : "FR", "safe" : 0, "age" : 0 }'
prefetch : '12' (???)

ACCEPTED REGIONS: according from https://peekier.com/assets/engine.js

o={AR:"Argentina",AU:"Australia",AT:"Austria",BE:"Belgium",BR:"Brazil",CA:"Canada",CL:"Chile",DK:"Denmark",FI:"Finland",FR:"France",DE:"Germany",GR:"Greece",HK:"Hong Kong",IN:"India",ID:"Indonesia",IE:"Ireland",IL:"Israel",IT:"Italy",JP:"Japan",KR:"Korea",MY:"Malaysia",MX:"Mexico",NL:"Netherlands",NZ:"New Zealand",NO:"Norway",CN:"China",PL:"Poland",PT:"Portugal",PH:"Philippines",RU:"Russia",SA:"Saudi Arabia",SG:"Singapore",ZA:"South Africa",ES:"Spain",SE:"Sweden",CH:"Switzerland",TW:"Taiwan",TH:"Thailand",TR:"Turkey",GB:"United Kingdom",US:"United States"}

JSON RESULTS (*title, *snippet, *url)

{
"success":true,"results":[{"title":"Télécharger Firefox — Navigateur web gratuit — Mozilla","snippet":"Téléchargez Mozilla Firefox, un navigateur web gratuit. Firefox est créé par une communauté mondiale, à but non lucratif, qui œuvre pour que les utilisateurs gardent le contrôle de leur vie en ligne. Téléchargez Firefox pour Windows, macOS, Linux, Android et iOS dès maintenant !","url":"https://www.mozilla.org/fr/firefox/new/","display":"https://www.mozilla.org/fr/firefox/new","preview":"00587e51c82865"},{"title":"Firefox – Une gamme de produits qui protègent votre vie privée","snippet":"Firefox est bien plus qu’un navigateur. C’est toute une gamme de produits qui traitent vos données et votre vie privée avec respect, où que vous soyez sur Web.","url":"https://www.mozilla.org/fr/firefox/","display":"https://www.mozilla.org/fr/Firefox","preview":"de666f71ce889b"},...]
}

await fetch("https://search.peekier.com/search", {
    ...
    "headers": {
        ...
        "Accept": "application/json, text/javascript, */*; q=0.01",
        "Accept-Language": "fr,fr-FR;q=0.8,en-US;q=0.5,en;q=0.3",
        "Content-Type": "application/x-www-form-urlencoded; charset=UTF-8"
    },
    "referrer": "https://peekier.com/",
    "body": "q=firefox&opts=%7B%22page%22%3A0%2C%22region%22%3A%22FR%22%2C%22safe%22%3A2%2C%22age%22%3A0%7D&prefetch=12",
    "method": "POST",
    "mode": "cors"
});

[unixfox]

This service is behind CloudFlare: https://checkforcloudflare.selesti.com/?q=https://peekier.com/
Not that good for privacy.

[return42]

Not that good for privacy.

@unixfox this is what I hear often .. I am not familiar with this subject: what exactly is the problem with CloudFlare?

[unixfox]

Cloudflare basically control half of the internet so they pretty much know all of what you are doing online because they see in plain text the data between you and the website.
Complementary information: https://notabug.org/crimeflare/cloudflare-tor/src/master/README.md

[return42]

Do I understand it right:

When I run an SSL secured application on Cloudflare, they are the owner of my private SSL key just to encrypt and reverse-proxy my service?

If so, I can't believe that there idiots out there paying money for such a honeypot.

Does it make sense to develop a plugin, blocking results hosted on Cloudflare?

[unixfox]

Do I understand it right:

When I run an SSL secured application on Cloudflare, they are the owner of my private SSL key just to encrypt and reverse-proxy my service?

Basically that's what Cloudflare is doing, a simple MITM between you and the final server of the website that you are visiting on.

If so, I can't believe that there idiots out there paying money for such a honeypot.

We are kinda discussing out of the initial topic.
Cloudflare started as a honeypot: https://web.archive.org/web/20200318125649/http://www.crimeflare.org:82/honeypot.html

Does it make sense to develop a plugin, blocking results hosted on Cloudflare?

On Searx? That would be a good idea. There are still some engines already built in Searx that are behind Cloudflare though.

[nilathedragon]

On Searx? That would be a good idea. There are still some engines already built in Searx that are behind Cloudflare though.

I would still add the option to allow cloudflare-proxied results though.

[dalf]

Peekier seems to send the requests to Bing:

https://peekier.com/#!ifconfig.me

The IP address in the text is from Microsoft, same about ifconfig.co.

(The IP address in the screenshot is from somewhere else, but I guess peekier use a farm of browsers to create the screenshots).

---

https://en.wikipedia.org/wiki/The_Market_for_Lemons

[andrew6838]

is peekier.com using Searx ?