8 attempts means you opened a single page then you went to see the report. DDG isn't doing deep packet inspection and can't distinguish which traffic is coming directly from the app logic and what is just the result of the user browsing a page. Also with "known to collect name, dob, city", ddg has no idea of the content, it just blocked the encrypted request. It could have been an embedded Facebook post in a page you visited, or a tracking pixel, but it's not Mull reporting to Facebook all that information