i was looking through my logs and i saw requests from .onion domains, which confused me a lot